Is this a safe way to protect against csrf?

F

F

Fivebam2020-07-18 11:34:20

CSRF

Fivebam, 2020-07-18 11:34:20

Is this a safe way to protect against csrf?

Is it possible to check with a script that the x-requested-with header equals XMLHttpRequest and only then conclude that the request is not forged?

Reply

Answer the question

Answer the question

In order to leave comments, you need to log in

1 answer(s)

A

Alexey Ukolov, 2020-07-18
@Fivebam

No, of course - you can set any header when requested.

Similar questions

D

Denis Goncharenko2019-03-04 10:34:43

What is the meaning of wp_nonce? 0Reply

V

Vladimir2019-04-01 12:23:06

How to log in to a site with CSRF protection? 2Reply

S

Sergey Rybakov2019-08-27 01:31:18

Is it correct to write the CSRF token in a cookie? 1Reply

S

syndarva2021-04-22 18:49:09

Do I need to enable CSRF for a SPA site? 3Reply

L

lemonlimelike2017-09-19 21:07:34

What is a CSRF attack? 3Reply

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question