CSRF When You Least Expect It.
Fun with Cross-Site Request Forgery (CSRF) in a creative Web Timing Attack scenario, highlighting the risks inherent to SameSite=None session cookies.
Fun with Cross-Site Request Forgery (CSRF) in a creative Web Timing Attack scenario, highlighting the risks inherent to SameSite=None session cookies.
Built with Eleventy and eleventy-base-blog.
Setting up this blog (quickly) with Eleventy.