← Back to glossary
🪃

CSRF (Cross‑Site Request Forgery)

Web Security

XSS (Cross‑Site Scripting) Security Headers Web Application Firewall (WAF) Session Management

Tricking your browser into doing something while you’re logged in.

Definition

CSRF is when a website tricks your browser into sending an action request (like “change email” or “send money”) while you are logged in somewhere else.

In plain English Tricking your browser into doing something while you’re logged in.

Why this matters

Why it matters: It can cause unwanted actions in your private accounts without you noticing.

Example

Example: Clicking a malicious link triggers a hidden request to change your account settings.