Is checking the referrer enough to protect against a CSRF attack?

后端 未结 5 1248
孤街浪徒
孤街浪徒 2020-12-10 00:10

Is checking the referrer enough to protect against a cross site request forgery attack? I know the referrer can be spoofed, but is there any way for the attacker to do that

5条回答
  •  天命终不由人
    2020-12-10 01:00

    Among other things, using the referrer won't work for users whose browsers (or corporate proxies) don't send referrers.

提交回复
热议问题