S
S
SHNM2020-12-04 22:47:44
In contact with
SHNM, 2020-12-04 22:47:44

Why is hash needed?

Hello! VKontakte has an "exit" button (link), some hash is stored in it, what is it for? After all, you can just make a page like this site.name/logoutand not write site.name/logout?hash=uegzywownbdheiwkxbthe fact that if I remove the hash or change the symbol, I will be redirected to the main page and yet, for some reason this hash is always the same. Why doesn't he change too?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
I
iBird Rose, 2020-12-04
@SHNM

this is protection against Cross-Site Request Forgery https://cheatsheetseries.owasp.org/cheatsheets/Cro...
this hash is generated per session. so it is checked when clicking that the click was made from the VK site, and not faked from another site

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question