I am testing an app for CSRF vulnerability and i observed that when i generate a Cross-domain XHR POC with burp and try to exploit, a pre-flight request is getting triggered but this is is not happening in IE. I am able to exploit and perform a state change action in Internet Explorer. What is the reason for this behavior??

  • Which IE version? – Benoit Esnard Aug 13 at 9:30
  • Its IE 11 (11.1268) – Raghav Aug 13 at 9:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.