Categories

JavaScriptPHPHTMLCssPythonWordPressWeb developmentLinuxMySQLAndroidWindowsJavaC++ / C#LayoutReactUbuntuYiiDjangoProgramming1C-BitrixLaravelSystem administrationTelegramJSONDebianPostgreSQLIOSGoogleHtaccessWindows ServerGitMacOSGoogle ChromeCMSWooСommerceBootstrapNginxSQLUnityAPI
Make a leaderReport
F
F
Fivebam2020-07-18 11:34:20
CSRF
Fivebam, 2020-07-18 11:34:20

Is this a safe way to protect against csrf?

Is it possible to check with a script that the x-requested-with header equals XMLHttpRequest and only then conclude that the request is not forged?

Reply
Answer the question

Answer the question

In order to leave comments, you need to log in

1 answer(s)
Report
A
Alexey Ukolov, 2020-07-18
@Fivebam

No, of course - you can set any header when requested.

Similar questions
K
KamilFo2015-03-22 15:53:49
Where to store the contents of the CSRF token in the Backbone client? 1Reply
S
Sergey Rybakov2019-08-27 01:31:18
Is it correct to write the CSRF token in a cookie? 1Reply
Y
yura2017-03-29 17:14:17
How to send an email in Django 1.10? 0Reply
G
goldwizard132017-05-01 18:21:57
How to overcome the error The CSRF token could not be verified? 1Reply
S
syndarva2021-04-22 18:49:09
Do I need to enable CSRF for a SPA site? 3Reply

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question