domains / families / security / csrf-cross-site-request-forgery

csrf-cross-site-request-forgery

separate

CSRF testing playbook. Use when reviewing state-changing web flows, anti-CSRF defenses, SameSite behavior, JSON CSRF, login CSRF, and OAuth state handling.

When to use

• reviewing state-changing web flows
• testing anti-CSRF defenses
• analyzing SameSite behavior
• testing JSON CSRF
• testing login CSRF
• reviewing OAuth state handling
• identifying token bypass techniques
• finding high-value state-changing endpoints

Skill page

Source