CSRF Vulnerabilities Are Still Relevant
summary
The talk explains why Cross-Site Request Forgery (CSRF) remains relevant for web application security, describing current defenses such as anti-CSRF tokens and the newer SameSite cookie attribute. It reviews CSRF’s shifting position in OWASP Top 10 and examines whether those defenses have actually reduced real-world CSRF risk for modern web apps.
AI-written summary · about
chapters (6)
- 0:00CSRF introduction
- 6:55CSRF relevance in 2017
- 9:49CSRF protection
- 13:52Bypassing CSRF defenses
- 31:30Protection recommendations
- 32:33Q&A
related talks
52mThe Past, Present, and Future of Cross-Site/Cross-Origin Request Forgery
47mKeynote: Request Forgery on the Web - SSRF, CSRF and Clickjacking
45mCSRF: not all defenses are created equal
52mThe Past, Present, and Future of Cross-Site/Cross-Origin Request Forgery
59mWeb Application Security Trends
35mFlagship Projects: CSRFGuard
01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017
18mCORS, XSS, CSRF, SQL injection #BackToTheBasics