What is csrf? What is session?

Question

Accepted Answer

CSRF is a type of attack where a malicious website tricks a user into performing actions on another website. Session is a way to store user data on the server side.

CSRF (Cross-Site Request Forgery) is a type of attack where a malicious website tricks a user into performing actions on another website without their knowledge or consent.
CSRF attacks exploit the trust that a site has in a user's browser by sending unauthorized requests using the user's session.
Sessions are a way to store user-specific data on the server side, typically in the form of a unique identifier that is passed between the client and server to maintain state.
Sessions help in maintaining user authentication and authorization across multiple requests.
Example: A CSRF attack could trick a user into unknowingly transferring money from their bank account to the attacker's account.
Example: Sessions are commonly used in web applications to keep track of a user's login status and other relevant information.

What is csrf? What is session?

Top greytHR Java Developer interview questions & answers

Popular interview questions of Java Developer

Top HR questions asked in greytHR Java Developer