Hacksplaining
  • For Teams
Log in Start Learning

Cross-Site Request Forgery

Your server interprets the request as Vic writing a post, and creates a new item on his timeline. This is not the action that Vic intended, but he may not quite have noticed what just occurred.

www.email.com
Subject:
Has science gone too far?
To:
Vic
Researchers have taught this horse how to do karate!
Some horses
What if it starts teaching the other horses karate?
A future hacking victim

Your server interprets the request as Vic writing a post, and creates a new item on his timeline. This is not the action that Vic intended, but he may not quite have noticed what just occurred.

Hacksplaining

Defend your code.

Learn

All Lessons AI Prompt Injection SQL Injection XSS CSRF

Teams

For Teams Features Pricing FAQ

Resources

Glossary OWASP Top 10 PCI Compliance Book

Legal

Privacy Terms DPA Subprocessors

© 2026 Hacksplaining. Built with in Seattle, WA, USA

Need help? Reach out to support@hacksplaining.com