Lesson:

Cross-Site Request Forgery

Public preview

Want everyone on your software team to learn this? Get completion tracking and compliance reporting with Hacksplaining for Teams. Free 14-day trial.

Train my team

Your server interprets the request as Vic writing a post, and creates a new item on his timeline. This is not the action that Vic intended, but he may not quite have noticed what just occurred.

www.email.com

Subject:

Has science gone too far?

To:

Vic

Researchers have taught this horse how to do karate!

What if it starts teaching the other horses karate?

Your server interprets the request as Vic writing a post, and creates a new item on his timeline. This is not the action that Vic intended, but he may not quite have noticed what just occurred.