{"id":476481,"date":"2023-08-09T07:29:55","date_gmt":"2023-08-09T07:29:55","guid":{"rendered":""},"modified":"2023-09-05T11:12:51","modified_gmt":"2023-09-05T11:12:51","slug":"cross-site-requested-forgery","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/in\/wiki\/cross-site-requested-forgery\/","title":{"rendered":"\u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927\u093f\u0924 \u091c\u093e\u0932\u0938\u093e\u091c\u0940"},"content":{"rendered":"

\u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0930\u093f\u0915\u094d\u0935\u0947\u0938\u094d\u091f \u092b\u093c\u0949\u0930\u094d\u091c\u0930\u0940 (CSRF) \u090f\u0915 \u092a\u094d\u0930\u0915\u093e\u0930 \u0915\u0940 \u0935\u0947\u092c \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u092d\u0947\u0926\u094d\u092f\u0924\u093e \u0939\u0948 \u091c\u094b \u0915\u093f\u0938\u0940 \u0939\u092e\u0932\u093e\u0935\u0930 \u0915\u094b \u0915\u093f\u0938\u0940 \u0910\u0938\u0947 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0940 \u0913\u0930 \u0938\u0947 \u0905\u0928\u0927\u093f\u0915\u0943\u0924 \u0915\u093e\u0930\u094d\u092f \u0915\u0930\u0928\u0947 \u0915\u0940 \u0905\u0928\u0941\u092e\u0924\u093f \u0926\u0947\u0924\u0940 \u0939\u0948 \u091c\u094b \u0915\u093f\u0938\u0940 \u0935\u0947\u092c \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u092a\u0930 \u092a\u094d\u0930\u092e\u093e\u0923\u093f\u0924 \u0939\u0948\u0964 CSRF \u0939\u092e\u0932\u0947 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0947 \u092c\u094d\u0930\u093e\u0909\u091c\u093c\u0930 \u092e\u0947\u0902 \u0935\u0947\u092c\u0938\u093e\u0907\u091f \u0915\u0947 \u092d\u0930\u094b\u0938\u0947 \u0915\u093e \u092b\u093e\u092f\u0926\u093e \u0909\u0920\u093e\u0924\u0947 \u0939\u0948\u0902, \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0940 \u091c\u093e\u0928\u0915\u093e\u0930\u0940 \u092f\u093e \u0938\u0939\u092e\u0924\u093f \u0915\u0947 \u092c\u093f\u0928\u093e \u0909\u0938\u0947 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0905\u0928\u0941\u0930\u094b\u0927 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u092a\u094d\u0930\u0947\u0930\u093f\u0924 \u0915\u0930\u0924\u0947 \u0939\u0948\u0902\u0964 \u0907\u0938 \u092a\u094d\u0930\u0915\u093e\u0930 \u0915\u093e \u0939\u092e\u0932\u093e \u0935\u0947\u092c \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0915\u0940 \u0905\u0916\u0902\u0921\u0924\u093e \u0914\u0930 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u0915\u0947 \u0932\u093f\u090f \u090f\u0915 \u0917\u0902\u092d\u0940\u0930 \u0916\u0924\u0930\u093e \u092a\u0948\u0926\u093e \u0915\u0930\u0924\u093e \u0939\u0948\u0964<\/p>\n

\u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 \u0915\u0940 \u0909\u0924\u094d\u092a\u0924\u094d\u0924\u093f \u0915\u093e \u0907\u0924\u093f\u0939\u093e\u0938 \u0914\u0930 \u0907\u0938\u0915\u093e \u092a\u0939\u0932\u093e \u0909\u0932\u094d\u0932\u0947\u0916<\/h2>\n

"\u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0930\u093f\u0915\u094d\u0935\u0947\u0938\u094d\u091f \u092b\u093c\u0949\u0930\u094d\u091c\u0930\u0940" \u0936\u092c\u094d\u0926 \u0915\u093e \u0907\u0938\u094d\u0924\u0947\u092e\u093e\u0932 \u092a\u0939\u0932\u0940 \u092c\u093e\u0930 2001 \u092e\u0947\u0902 \u0936\u094b\u0927\u0915\u0930\u094d\u0924\u093e\u0913\u0902 RSnake \u0914\u0930 \u0905\u092e\u093f\u0924 \u0915\u094d\u0932\u0947\u0928 \u0928\u0947 \u0935\u0947\u092c \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u092a\u0930 \u091a\u0930\u094d\u091a\u093e \u0915\u0947 \u0926\u094c\u0930\u093e\u0928 \u0915\u093f\u092f\u093e \u0925\u093e\u0964 \u0939\u093e\u0932\u093e\u0901\u0915\u093f, CSRF \u091c\u0948\u0938\u0947 \u0939\u092e\u0932\u094b\u0902 \u0915\u0940 \u0905\u0935\u0927\u093e\u0930\u0923\u093e 1990 \u0915\u0947 \u0926\u0936\u0915 \u0915\u0947 \u092e\u0927\u094d\u092f \u0938\u0947 \u0939\u0940 \u091c\u093e\u0928\u0940 \u091c\u093e\u0924\u0940 \u0925\u0940\u0964 \u0907\u0938\u0940 \u0924\u0930\u0939 \u0915\u0947 \u0939\u092e\u0932\u0947 \u0915\u093e \u092a\u0939\u0932\u093e \u091c\u094d\u091e\u093e\u0924 \u0909\u0932\u094d\u0932\u0947\u0916 1996 \u092e\u0947\u0902 \u0939\u0941\u0906 \u0925\u093e \u091c\u092c \u090f\u0921\u092e \u092c\u093e\u0930\u094d\u0925 \u0928\u093e\u092e\u0915 \u090f\u0915 \u0936\u094b\u0927\u0915\u0930\u094d\u0924\u093e \u0928\u0947 \u0928\u0947\u091f\u0938\u094d\u0915\u0947\u092a \u0928\u0947\u0935\u093f\u0917\u0947\u091f\u0930 \u092c\u094d\u0930\u093e\u0909\u091c\u093c\u0930 \u092e\u0947\u0902 \u090f\u0915 \u092d\u0947\u0926\u094d\u092f\u0924\u093e \u0915\u093e \u0935\u0930\u094d\u0923\u0928 \u0915\u093f\u092f\u093e \u0925\u093e \u091c\u094b \u090f\u0915 \u0939\u092e\u0932\u093e\u0935\u0930 \u0915\u094b HTTP \u0905\u0928\u0941\u0930\u094b\u0927\u094b\u0902 \u0915\u094b \u092b\u093c\u094b\u0930\u094d\u091c \u0915\u0930\u0928\u0947 \u0915\u0940 \u0905\u0928\u0941\u092e\u0924\u093f \u0926\u0947\u0924\u093e \u0925\u093e\u0964<\/p>\n

\u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 \u0915\u0947 \u092c\u093e\u0930\u0947 \u092e\u0947\u0902 \u0935\u093f\u0938\u094d\u0924\u0943\u0924 \u091c\u093e\u0928\u0915\u093e\u0930\u0940<\/h2>\n

CSRF \u0939\u092e\u0932\u0947 \u0906\u092e \u0924\u094c\u0930 \u092a\u0930 \u0930\u093e\u091c\u094d\u092f-\u092a\u0930\u093f\u0935\u0930\u094d\u0924\u0928 \u0905\u0928\u0941\u0930\u094b\u0927\u094b\u0902 \u0915\u094b \u0932\u0915\u094d\u0937\u093f\u0924 \u0915\u0930\u0924\u0947 \u0939\u0948\u0902, \u091c\u0948\u0938\u0947 \u0916\u093e\u0924\u093e \u0938\u0947\u091f\u093f\u0902\u0917 \u0938\u0902\u0936\u094b\u0927\u093f\u0924 \u0915\u0930\u0928\u093e, \u0916\u0930\u0940\u0926\u093e\u0930\u0940 \u0915\u0930\u0928\u093e, \u092f\u093e \u0909\u091a\u094d\u091a \u0935\u093f\u0936\u0947\u0937\u093e\u0927\u093f\u0915\u093e\u0930\u094b\u0902 \u0915\u0947 \u0938\u093e\u0925 \u0915\u093e\u0930\u094d\u092f \u0915\u0930\u0928\u093e\u0964 \u0939\u092e\u0932\u093e\u0935\u0930 \u090f\u0915 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0935\u0947\u092c\u0938\u093e\u0907\u091f \u092f\u093e \u0908\u092e\u0947\u0932 \u092c\u0928\u093e\u0924\u093e \u0939\u0948 \u091c\u093f\u0938\u092e\u0947\u0902 \u0935\u093f\u0936\u0947\u0937 \u0930\u0942\u092a \u0938\u0947 \u0924\u0948\u092f\u093e\u0930 \u0915\u093f\u092f\u093e \u0917\u092f\u093e URL \u092f\u093e \u092b\u093c\u0949\u0930\u094d\u092e \u0939\u094b\u0924\u093e \u0939\u0948 \u091c\u094b \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0947 \u092c\u094d\u0930\u093e\u0909\u091c\u093c\u0930 \u0915\u094b \u0932\u0915\u094d\u0937\u093f\u0924 \u0935\u0947\u092c \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u092a\u0930 \u0905\u0928\u0927\u093f\u0915\u0943\u0924 \u0915\u093e\u0930\u094d\u0930\u0935\u093e\u0908 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u091f\u094d\u0930\u093f\u0917\u0930 \u0915\u0930\u0924\u093e \u0939\u0948\u0964 \u0910\u0938\u093e \u0907\u0938\u0932\u093f\u090f \u0939\u094b\u0924\u093e \u0939\u0948 \u0915\u094d\u092f\u094b\u0902\u0915\u093f \u092c\u094d\u0930\u093e\u0909\u091c\u093c\u0930 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0905\u0928\u0941\u0930\u094b\u0927 \u092e\u0947\u0902 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0947 \u092a\u094d\u0930\u092e\u093e\u0923\u093f\u0924 \u0938\u0924\u094d\u0930 \u0915\u094d\u0930\u0947\u0921\u0947\u0902\u0936\u093f\u092f\u0932 \u0915\u094b \u0938\u094d\u0935\u091a\u093e\u0932\u093f\u0924 \u0930\u0942\u092a \u0938\u0947 \u0936\u093e\u092e\u093f\u0932 \u0915\u0930\u0924\u093e \u0939\u0948, \u091c\u093f\u0938\u0938\u0947 \u092f\u0939 \u0935\u0948\u0927 \u092a\u094d\u0930\u0924\u0940\u0924 \u0939\u094b\u0924\u093e \u0939\u0948\u0964<\/p>\n

\u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 \u0915\u0940 \u0906\u0902\u0924\u0930\u093f\u0915 \u0938\u0902\u0930\u091a\u0928\u093e \u0914\u0930 \u092f\u0939 \u0915\u0948\u0938\u0947 \u0915\u093e\u092e \u0915\u0930\u0924\u0940 \u0939\u0948<\/h2>\n

\u0938\u0940\u090f\u0938\u0906\u0930\u090f\u092b \u0915\u0947 \u092a\u0940\u091b\u0947 \u0915\u0940 \u0915\u094d\u0930\u093f\u092f\u093e\u0935\u093f\u0927\u093f \u092e\u0947\u0902 \u0928\u093f\u092e\u094d\u0928\u0932\u093f\u0916\u093f\u0924 \u091a\u0930\u0923 \u0936\u093e\u092e\u093f\u0932 \u0939\u0948\u0902:<\/p>\n

    \n
  1. \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u093f\u0938\u0940 \u0935\u0947\u092c \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u092e\u0947\u0902 \u0932\u0949\u0917 \u0907\u0928 \u0915\u0930\u0924\u093e \u0939\u0948 \u0914\u0930 \u090f\u0915 \u092a\u094d\u0930\u092e\u093e\u0923\u0940\u0915\u0930\u0923 \u091f\u094b\u0915\u0928 \u092a\u094d\u0930\u093e\u092a\u094d\u0924 \u0915\u0930\u0924\u093e \u0939\u0948, \u091c\u094b \u0906\u092e\u0924\u094c\u0930 \u092a\u0930 \u0915\u0941\u0915\u0940 \u092f\u093e \u0915\u093f\u0938\u0940 \u091b\u093f\u092a\u0947 \u0939\u0941\u090f \u092b\u0949\u0930\u094d\u092e \u092b\u093c\u0940\u0932\u094d\u0921 \u092e\u0947\u0902 \u0938\u0902\u0917\u094d\u0930\u0939\u0940\u0924 \u0939\u094b\u0924\u093e \u0939\u0948\u0964<\/li>\n
  2. \u091c\u092c \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0905\u092d\u0940 \u092d\u0940 \u0932\u0949\u0917 \u0907\u0928 \u0930\u0939\u0924\u093e \u0939\u0948, \u0924\u094b \u0935\u0939 \u0915\u093f\u0938\u0940 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0935\u0947\u092c\u0938\u093e\u0907\u091f \u092a\u0930 \u091a\u0932\u093e \u091c\u093e\u0924\u093e \u0939\u0948 \u092f\u093e \u0915\u093f\u0938\u0940 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0932\u093f\u0902\u0915 \u092a\u0930 \u0915\u094d\u0932\u093f\u0915 \u0915\u0930 \u0926\u0947\u0924\u093e \u0939\u0948\u0964<\/li>\n
  3. \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0935\u0947\u092c\u0938\u093e\u0907\u091f, \u092c\u094d\u0930\u093e\u0909\u091c\u093c\u0930 \u0915\u0940 \u0915\u0941\u0915\u0940\u091c\u093c \u092f\u093e \u0938\u0924\u094d\u0930 \u0921\u0947\u091f\u093e \u092e\u0947\u0902 \u0938\u0902\u0917\u094d\u0930\u0939\u0940\u0924 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0947 \u0915\u094d\u0930\u0947\u0921\u0947\u0902\u0936\u093f\u092f\u0932\u094d\u0938 \u0915\u093e \u0909\u092a\u092f\u094b\u0917 \u0915\u0930\u0915\u0947, \u0932\u0915\u094d\u0937\u094d\u092f \u0935\u0947\u092c \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0915\u094b \u090f\u0915 \u0924\u0948\u092f\u093e\u0930 HTTP \u0905\u0928\u0941\u0930\u094b\u0927 \u092d\u0947\u091c\u0924\u0940 \u0939\u0948\u0964<\/li>\n
  4. \u0932\u0915\u094d\u0937\u094d\u092f \u0935\u0947\u092c \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u0905\u0928\u0941\u0930\u094b\u0927 \u092a\u094d\u0930\u093e\u092a\u094d\u0924 \u0915\u0930\u0924\u093e \u0939\u0948 \u0914\u0930, \u091a\u0942\u0902\u0915\u093f \u0907\u0938\u092e\u0947\u0902 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u093e \u0935\u0948\u0927 \u092a\u094d\u0930\u092e\u093e\u0923\u0940\u0915\u0930\u0923 \u091f\u094b\u0915\u0928 \u0939\u094b\u0924\u093e \u0939\u0948, \u0907\u0938\u0932\u093f\u090f \u092f\u0939 \u0905\u0928\u0941\u0930\u094b\u0927 \u0915\u094b \u0907\u0938 \u092a\u094d\u0930\u0915\u093e\u0930 \u0938\u0902\u0938\u093e\u0927\u093f\u0924 \u0915\u0930\u0924\u093e \u0939\u0948 \u092e\u093e\u0928\u094b \u092f\u0939 \u0935\u0948\u0927 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0938\u0947 \u0906\u092f\u093e \u0939\u094b\u0964<\/li>\n
  5. \u092a\u0930\u093f\u0923\u093e\u092e\u0938\u094d\u0935\u0930\u0942\u092a, \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0940 \u0913\u0930 \u0938\u0947 \u0909\u0928\u0915\u0940 \u091c\u093e\u0928\u0915\u093e\u0930\u0940 \u0915\u0947 \u092c\u093f\u0928\u093e \u0939\u0940 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0915\u093e\u0930\u094d\u092f \u0915\u093f\u092f\u093e \u091c\u093e\u0924\u093e \u0939\u0948\u0964<\/li>\n<\/ol>\n

    \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 \u0915\u0940 \u092a\u094d\u0930\u092e\u0941\u0916 \u0935\u093f\u0936\u0947\u0937\u0924\u093e\u0913\u0902 \u0915\u093e \u0935\u093f\u0936\u094d\u0932\u0947\u0937\u0923<\/h2>\n

    \u0938\u0940\u090f\u0938\u0906\u0930\u090f\u092b \u0939\u092e\u0932\u094b\u0902 \u0915\u0940 \u092a\u094d\u0930\u092e\u0941\u0916 \u0935\u093f\u0936\u0947\u0937\u0924\u093e\u090f\u0902 \u0928\u093f\u092e\u094d\u0928\u0932\u093f\u0916\u093f\u0924 \u0939\u0948\u0902:<\/p>\n

      \n
    1. \u0905\u0926\u0943\u0936\u094d\u092f \u0936\u094b\u0937\u0923<\/strong>: \u0938\u0940\u090f\u0938\u0906\u0930\u090f\u092b \u0939\u092e\u0932\u0947 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0940 \u091c\u093e\u0928\u0915\u093e\u0930\u0940 \u0915\u0947 \u092c\u093f\u0928\u093e \u091a\u0941\u092a\u091a\u093e\u092a \u0928\u093f\u0937\u094d\u092a\u093e\u0926\u093f\u0924 \u0915\u093f\u090f \u091c\u093e \u0938\u0915\u0924\u0947 \u0939\u0948\u0902, \u091c\u093f\u0938\u0938\u0947 \u0935\u0947 \u0916\u0924\u0930\u0928\u093e\u0915 \u0939\u094b \u091c\u093e\u0924\u0947 \u0939\u0948\u0902 \u0914\u0930 \u0909\u0928\u0915\u093e \u092a\u0924\u093e \u0932\u0917\u093e\u0928\u093e \u0915\u0920\u093f\u0928 \u0939\u094b \u091c\u093e\u0924\u093e \u0939\u0948\u0964<\/li>\n
    2. \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0947 \u0935\u093f\u0936\u094d\u0935\u093e\u0938 \u092a\u0930 \u0928\u093f\u0930\u094d\u092d\u0930\u0924\u093e<\/strong>: CSRF \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0947 \u092c\u094d\u0930\u093e\u0909\u091c\u093c\u0930 \u0914\u0930 \u0935\u0947\u092c \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u0915\u0947 \u092c\u0940\u091a \u0938\u094d\u0925\u093e\u092a\u093f\u0924 \u0935\u093f\u0936\u094d\u0935\u093e\u0938 \u0915\u093e \u092b\u093e\u092f\u0926\u093e \u0909\u0920\u093e\u0924\u093e \u0939\u0948\u0964<\/li>\n
    3. \u0938\u0924\u094d\u0930-\u0906\u0927\u093e\u0930\u093f\u0924<\/strong>: \u0938\u0940\u090f\u0938\u0906\u0930\u090f\u092b \u0939\u092e\u0932\u0947 \u0905\u0915\u094d\u0938\u0930 \u0938\u0915\u094d\u0930\u093f\u092f \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0938\u0924\u094d\u0930\u094b\u0902 \u092a\u0930 \u0928\u093f\u0930\u094d\u092d\u0930 \u0939\u094b\u0924\u0947 \u0939\u0948\u0902, \u091c\u094b \u0905\u0928\u0941\u0930\u094b\u0927\u094b\u0902 \u0915\u094b \u091c\u093e\u0932\u0940 \u092c\u0928\u093e\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0940 \u092a\u094d\u0930\u092e\u093e\u0923\u0940\u0915\u0943\u0924 \u0938\u094d\u0925\u093f\u0924\u093f \u0915\u093e \u0909\u092a\u092f\u094b\u0917 \u0915\u0930\u0924\u0947 \u0939\u0948\u0902\u0964<\/li>\n
    4. \u092a\u094d\u0930\u092d\u093e\u0935\u0936\u093e\u0932\u0940 \u0915\u093e\u0930\u094d\u092f\u0935\u093e\u0939\u093f\u092f\u093e\u0901<\/strong>\u092f\u0947 \u0939\u092e\u0932\u0947 \u0930\u093e\u091c\u094d\u092f-\u092a\u0930\u093f\u0935\u0930\u094d\u0924\u0928\u0915\u093e\u0930\u0940 \u0915\u093e\u0930\u094d\u092f\u094b\u0902 \u0915\u094b \u0932\u0915\u094d\u0937\u094d\u092f \u092c\u0928\u093e\u0924\u0947 \u0939\u0948\u0902, \u091c\u093f\u0938\u0915\u0947 \u092a\u0930\u093f\u0923\u093e\u092e\u0938\u094d\u0935\u0930\u0942\u092a \u0921\u0947\u091f\u093e \u0938\u0902\u0936\u094b\u0927\u0928 \u092f\u093e \u0935\u093f\u0924\u094d\u0924\u0940\u092f \u0939\u093e\u0928\u093f \u091c\u0948\u0938\u0947 \u092e\u0939\u0924\u094d\u0935\u092a\u0942\u0930\u094d\u0923 \u092a\u0930\u093f\u0923\u093e\u092e \u0938\u093e\u092e\u0928\u0947 \u0906\u0924\u0947 \u0939\u0948\u0902\u0964<\/li>\n<\/ol>\n

      \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 \u0915\u0947 \u092a\u094d\u0930\u0915\u093e\u0930<\/h2>\n\n\n\n\n\n\n\n\n
      \u092a\u094d\u0930\u0915\u093e\u0930<\/th>\n\u0935\u093f\u0935\u0930\u0923<\/th>\n<\/tr>\n<\/thead>\n
      \u0938\u0930\u0932 \u0938\u0940\u090f\u0938\u0906\u0930\u090f\u092b<\/td>\n\u0938\u092c\u0938\u0947 \u0938\u093e\u092e\u093e\u0928\u094d\u092f \u092a\u094d\u0930\u0915\u093e\u0930, \u091c\u0939\u093e\u0902 \u0932\u0915\u094d\u0937\u094d\u092f \u0935\u0947\u092c \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u0915\u094b \u090f\u0915 \u090f\u0915\u0932 \u091c\u093e\u0932\u0940 \u0905\u0928\u0941\u0930\u094b\u0927 \u092d\u0947\u091c\u093e \u091c\u093e\u0924\u093e \u0939\u0948\u0964<\/td>\n<\/tr>\n
      \u092c\u094d\u0932\u093e\u0907\u0902\u0921 \u0938\u0940\u090f\u0938\u0906\u0930\u090f\u092b<\/td>\n\u0939\u092e\u0932\u093e\u0935\u0930 \u092c\u093f\u0928\u093e \u092a\u094d\u0930\u0924\u094d\u092f\u0941\u0924\u094d\u0924\u0930 \u092a\u094d\u0930\u093e\u092a\u094d\u0924 \u0915\u093f\u090f \u0932\u0915\u094d\u0937\u094d\u092f \u0915\u094b \u090f\u0915 \u0924\u0948\u092f\u093e\u0930 \u0915\u093f\u092f\u093e \u0917\u092f\u093e \u0905\u0928\u0941\u0930\u094b\u0927 \u092d\u0947\u091c\u0924\u093e \u0939\u0948, \u091c\u093f\u0938\u0938\u0947 \u0935\u0939 "\u0905\u0902\u0927\u093e" \u0939\u094b \u091c\u093e\u0924\u093e \u0939\u0948\u0964<\/td>\n<\/tr>\n
      XSS \u0915\u0947 \u0938\u093e\u0925 CSRF<\/td>\n\u0939\u092e\u0932\u093e\u0935\u0930 \u092a\u0940\u0921\u093c\u093f\u0924\u094b\u0902 \u092a\u0930 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f \u0928\u093f\u0937\u094d\u092a\u093e\u0926\u093f\u0924 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f CSRF \u0915\u094b \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f\u093f\u0902\u0917 (XSS) \u0915\u0947 \u0938\u093e\u0925 \u0938\u0902\u092f\u094b\u091c\u093f\u0924 \u0915\u0930\u0924\u093e \u0939\u0948\u0964<\/td>\n<\/tr>\n
      JSON \u090f\u0902\u0921\u092a\u0949\u0907\u0902\u091f \u0915\u0947 \u0938\u093e\u0925 CSRF<\/td>\nJSON \u090f\u0902\u0921\u092a\u0949\u0907\u0902\u091f \u0915\u093e \u0909\u092a\u092f\u094b\u0917 \u0915\u0930\u0928\u0947 \u0935\u093e\u0932\u0947 \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917\u094b\u0902 \u0915\u094b \u0932\u0915\u094d\u0937\u094d\u092f \u0915\u0930\u0915\u0947, \u0939\u092e\u0932\u093e\u0935\u0930 CSRF \u0915\u094b \u0928\u093f\u0937\u094d\u092a\u093e\u0926\u093f\u0924 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f JSON \u0921\u0947\u091f\u093e \u092e\u0947\u0902 \u0939\u0947\u0930\u092b\u0947\u0930 \u0915\u0930\u0924\u093e \u0939\u0948\u0964<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 \u0915\u093e \u0909\u092a\u092f\u094b\u0917 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0924\u0930\u0940\u0915\u0947, \u0938\u092e\u0938\u094d\u092f\u093e\u090f\u0902 \u0914\u0930 \u0909\u0928\u0915\u0947 \u0938\u092e\u093e\u0927\u093e\u0928<\/h2>\n

      \u0936\u094b\u0937\u0923 \u0915\u0947 \u0924\u0930\u0940\u0915\u0947<\/h3>\n
        \n
      1. \u0905\u0928\u0927\u093f\u0915\u0943\u0924 \u0916\u093e\u0924\u093e \u0938\u0902\u091a\u093e\u0932\u0928: \u0939\u092e\u0932\u093e\u0935\u0930 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e\u0913\u0902 \u0915\u094b \u0927\u094b\u0916\u093e \u0926\u0947\u0915\u0930 \u0909\u0928\u0915\u0940 \u0916\u093e\u0924\u093e \u0938\u0947\u091f\u093f\u0902\u0917 \u092f\u093e \u092a\u093e\u0938\u0935\u0930\u094d\u0921 \u092c\u0926\u0932 \u0938\u0915\u0924\u0947 \u0939\u0948\u0902\u0964<\/li>\n
      2. \u0935\u093f\u0924\u094d\u0924\u0940\u092f \u0932\u0947\u0928\u0926\u0947\u0928: \u0938\u0940\u090f\u0938\u0906\u0930\u090f\u092b \u0905\u0928\u0927\u093f\u0915\u0943\u0924 \u0927\u0928 \u0939\u0938\u094d\u0924\u093e\u0902\u0924\u0930\u0923 \u092f\u093e \u0916\u0930\u0940\u0926 \u0915\u094b \u0938\u0941\u0917\u092e \u092c\u0928\u093e \u0938\u0915\u0924\u093e \u0939\u0948\u0964<\/li>\n
      3. \u0921\u0947\u091f\u093e \u0939\u0947\u0930\u092b\u0947\u0930: \u0939\u092e\u0932\u093e\u0935\u0930 \u090f\u092a\u094d\u0932\u093f\u0915\u0947\u0936\u0928 \u0915\u0947 \u092d\u0940\u0924\u0930 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0921\u0947\u091f\u093e \u0915\u094b \u0938\u0902\u0936\u094b\u0927\u093f\u0924 \u092f\u093e \u0939\u091f\u093e \u0926\u0947\u0924\u0947 \u0939\u0948\u0902\u0964<\/li>\n<\/ol>\n

        \u0938\u092e\u093e\u0927\u093e\u0928 \u0914\u0930 \u0930\u094b\u0915\u0925\u093e\u092e<\/h3>\n
          \n
        1. \u0938\u0940\u090f\u0938\u0906\u0930\u090f\u092b \u091f\u094b\u0915\u0928: \u092a\u094d\u0930\u0924\u094d\u092f\u0947\u0915 \u0905\u0928\u0941\u0930\u094b\u0927 \u0915\u0940 \u0935\u0948\u0927\u0924\u093e \u0938\u0924\u094d\u092f\u093e\u092a\u093f\u0924 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u0909\u0938\u092e\u0947\u0902 \u0905\u0926\u094d\u0935\u093f\u0924\u0940\u092f \u091f\u094b\u0915\u0928 \u0932\u093e\u0917\u0942 \u0915\u0930\u0947\u0902\u0964<\/li>\n
        2. SameSite \u0915\u0941\u0915\u0940\u091c\u093c: \u0915\u0941\u0915\u0940 \u0926\u093e\u092f\u0930\u0947 \u0915\u094b \u092a\u094d\u0930\u0924\u093f\u092c\u0902\u0927\u093f\u0924 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f SameSite \u0935\u093f\u0936\u0947\u0937\u0924\u093e\u0913\u0902 \u0915\u093e \u0909\u092a\u092f\u094b\u0917 \u0915\u0930\u0947\u0902\u0964<\/li>\n
        3. \u0915\u0938\u094d\u091f\u092e \u0905\u0928\u0941\u0930\u094b\u0927 \u0939\u0947\u0921\u0930: \u0905\u0928\u0941\u0930\u094b\u0927\u094b\u0902 \u0915\u094b \u092e\u093e\u0928\u094d\u092f \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u0915\u0938\u094d\u091f\u092e \u0939\u0947\u0921\u0930 \u091c\u094b\u0921\u093c\u0947\u0902\u0964<\/li>\n
        4. \u0921\u092c\u0932 \u0938\u092c\u092e\u093f\u091f \u0915\u0941\u0915\u0940\u091c\u093c: \u091f\u094b\u0915\u0928 \u092e\u093e\u0928 \u0938\u0947 \u092e\u0947\u0932 \u0916\u093e\u0928\u0947 \u0935\u093e\u0932\u0940 \u090f\u0915 \u0926\u094d\u0935\u093f\u0924\u0940\u092f\u0915 \u0915\u0941\u0915\u0940 \u0936\u093e\u092e\u093f\u0932 \u0915\u0930\u0947\u0902\u0964<\/li>\n<\/ol>\n

          \u092e\u0941\u0916\u094d\u092f \u0935\u093f\u0936\u0947\u0937\u0924\u093e\u090f\u0901 \u0914\u0930 \u0938\u092e\u093e\u0928 \u0936\u092c\u094d\u0926\u094b\u0902 \u0915\u0947 \u0938\u093e\u0925 \u0924\u0941\u0932\u0928\u093e<\/h2>\n\n\n\n\n\n\n\n
          \u0905\u0935\u0927\u093f<\/th>\n\u0935\u093f\u0935\u0930\u0923<\/th>\n<\/tr>\n<\/thead>\n
          \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f\u093f\u0902\u0917 (XSS)<\/td>\n\u0905\u0928\u094d\u092f \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e\u0913\u0902 \u0926\u094d\u0935\u093e\u0930\u093e \u0926\u0947\u0916\u0947 \u0917\u090f \u0935\u0947\u092c \u092a\u0947\u091c\u094b\u0902 \u092e\u0947\u0902 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f \u0921\u093e\u0932\u0928\u0947 \u092a\u0930 \u0927\u094d\u092f\u093e\u0928 \u0915\u0947\u0902\u0926\u094d\u0930\u093f\u0924 \u0915\u0930\u0924\u093e \u0939\u0948\u0964<\/td>\n<\/tr>\n
          \u0915\u094d\u0930\u0949\u0938 \u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940<\/td>\n\u0930\u093e\u091c\u094d\u092f-\u092a\u0930\u093f\u0935\u0930\u094d\u0924\u0928\u0915\u093e\u0930\u0940 \u0915\u093e\u0930\u094d\u0930\u0935\u093e\u0907\u092f\u094b\u0902 \u0915\u094b \u0932\u0915\u094d\u0937\u093f\u0924 \u0915\u0930\u0924\u093e \u0939\u0948, \u0905\u0928\u093e\u0927\u093f\u0915\u0943\u0924 \u0905\u0928\u0941\u0930\u094b\u0927\u094b\u0902 \u0915\u094b \u0928\u093f\u0937\u094d\u092a\u093e\u0926\u093f\u0924 \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0915\u0947 \u0935\u093f\u0936\u094d\u0935\u093e\u0938 \u0915\u093e \u0932\u093e\u092d \u0909\u0920\u093e\u0924\u093e \u0939\u0948\u0964<\/td>\n<\/tr>\n
          \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f \u0938\u092e\u093e\u0935\u0947\u0936\u0928<\/td>\n\u0907\u0938\u092e\u0947\u0902 \u0915\u093f\u0938\u0940 \u092c\u093e\u0939\u0930\u0940 \u0921\u094b\u092e\u0947\u0928 \u0938\u0947 \u0926\u0941\u0930\u094d\u092d\u093e\u0935\u0928\u093e\u092a\u0942\u0930\u094d\u0923 \u0938\u094d\u0915\u094d\u0930\u093f\u092a\u094d\u091f \u0915\u094b \u0932\u0915\u094d\u0937\u093f\u0924 \u0935\u0947\u092c \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u092e\u0947\u0902 \u0936\u093e\u092e\u093f\u0932 \u0915\u0930\u0928\u093e \u0936\u093e\u092e\u093f\u0932 \u0939\u0948\u0964<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 \u0938\u0947 \u0938\u0902\u092c\u0902\u0927\u093f\u0924 \u092d\u0935\u093f\u0937\u094d\u092f \u0915\u0947 \u092a\u0930\u093f\u092a\u094d\u0930\u0947\u0915\u094d\u0937\u094d\u092f \u0914\u0930 \u092a\u094d\u0930\u094c\u0926\u094d\u092f\u094b\u0917\u093f\u0915\u093f\u092f\u093e\u0902<\/h2>\n

          \u091c\u0948\u0938\u0947-\u091c\u0948\u0938\u0947 \u0935\u0947\u092c \u0924\u0915\u0928\u0940\u0915 \u0935\u093f\u0915\u0938\u093f\u0924 \u0939\u094b\u0924\u0940 \u0939\u0948, CSRF \u0939\u092e\u0932\u094b\u0902 \u0915\u093e \u092e\u0941\u0915\u093e\u092c\u0932\u093e \u0915\u0930\u0928\u0947 \u0915\u0947 \u0932\u093f\u090f \u0928\u090f \u0930\u0915\u094d\u0937\u093e \u0924\u0902\u0924\u094d\u0930 \u0909\u092d\u0930\u0928\u0947 \u0915\u0940 \u0938\u0902\u092d\u093e\u0935\u0928\u093e \u0939\u0948\u0964 \u092c\u093e\u092f\u094b\u092e\u0947\u091f\u094d\u0930\u093f\u0915\u094d\u0938, \u091f\u094b\u0915\u0928\u093e\u0907\u091c\u0947\u0936\u0928 \u0914\u0930 \u092e\u0932\u094d\u091f\u0940-\u092b\u0948\u0915\u094d\u091f\u0930 \u0911\u0925\u0947\u0902\u091f\u093f\u0915\u0947\u0936\u0928 \u0915\u093e \u090f\u0915\u0940\u0915\u0930\u0923 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0938\u0924\u094d\u092f\u093e\u092a\u0928 \u0915\u094b \u092e\u091c\u092c\u0942\u0924 \u0915\u0930 \u0938\u0915\u0924\u093e \u0939\u0948\u0964 \u0907\u0938\u0915\u0947 \u0905\u0924\u093f\u0930\u093f\u0915\u094d\u0924, \u092c\u094d\u0930\u093e\u0909\u091c\u093c\u0930 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u0938\u0902\u0935\u0930\u094d\u0926\u094d\u0927\u0928 \u0914\u0930 \u092b\u094d\u0930\u0947\u092e\u0935\u0930\u094d\u0915 \u091c\u094b \u0938\u094d\u0935\u091a\u093e\u0932\u093f\u0924 \u0930\u0942\u092a \u0938\u0947 CSRF \u0915\u092e\u091c\u094b\u0930\u093f\u092f\u094b\u0902 \u0915\u093e \u092a\u0924\u093e \u0932\u0917\u093e\u0924\u0947 \u0939\u0948\u0902 \u0914\u0930 \u0909\u0928\u094d\u0939\u0947\u0902 \u0930\u094b\u0915\u0924\u0947 \u0939\u0948\u0902, \u092d\u0935\u093f\u0937\u094d\u092f \u0915\u0947 \u0916\u0924\u0930\u094b\u0902 \u0915\u094b \u0915\u092e \u0915\u0930\u0928\u0947 \u092e\u0947\u0902 \u092e\u0939\u0924\u094d\u0935\u092a\u0942\u0930\u094d\u0923 \u092d\u0942\u092e\u093f\u0915\u093e \u0928\u093f\u092d\u093e\u090f\u0902\u0917\u0947\u0964<\/p>\n

          \u092a\u094d\u0930\u0949\u0915\u094d\u0938\u0940 \u0938\u0930\u094d\u0935\u0930 \u0915\u094b \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 \u0938\u0947 \u0915\u0948\u0938\u0947 \u091c\u094b\u0921\u093c\u093e \u091c\u093e \u0938\u0915\u0924\u093e \u0939\u0948<\/h2>\n

          \u092a\u094d\u0930\u0949\u0915\u094d\u0938\u0940 \u0938\u0930\u094d\u0935\u0930 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e\u0913\u0902 \u0914\u0930 \u0935\u0947\u092c \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917\u094b\u0902 \u0915\u0947 \u092c\u0940\u091a \u092e\u0927\u094d\u092f\u0938\u094d\u0925 \u0915\u0947 \u0930\u0942\u092a \u092e\u0947\u0902 \u0915\u093e\u0930\u094d\u092f \u0915\u0930\u0924\u0947 \u0939\u0948\u0902\u0964 CSRF \u0915\u0947 \u0938\u0902\u0926\u0930\u094d\u092d \u092e\u0947\u0902, \u092a\u094d\u0930\u0949\u0915\u094d\u0938\u0940 \u0938\u0930\u094d\u0935\u0930 \u0909\u092a\u092f\u094b\u0917\u0915\u0930\u094d\u0924\u093e \u0905\u0928\u0941\u0930\u094b\u0927\u094b\u0902 \u0915\u094b \u092e\u093e\u0928\u094d\u092f \u0915\u0930\u0928\u0947 \u092e\u0947\u0902 \u0905\u0924\u093f\u0930\u093f\u0915\u094d\u0924 \u091c\u091f\u093f\u0932\u0924\u093e \u0932\u093e \u0938\u0915\u0924\u0947 \u0939\u0948\u0902, \u0938\u0902\u092d\u093e\u0935\u093f\u0924 \u0930\u0942\u092a \u0938\u0947 CSRF \u0915\u092e\u091c\u094b\u0930\u093f\u092f\u094b\u0902 \u0915\u094b \u0915\u092e \u092f\u093e \u092c\u0922\u093c\u093e \u0938\u0915\u0924\u0947 \u0939\u0948\u0902\u0964 \u0909\u091a\u093f\u0924 \u0930\u0942\u092a \u0938\u0947 \u0915\u0949\u0928\u094d\u092b\u093c\u093f\u0917\u0930 \u0915\u093f\u090f \u0917\u090f \u092a\u094d\u0930\u0949\u0915\u094d\u0938\u0940 \u0938\u0930\u094d\u0935\u0930 \u0906\u0928\u0947 \u0935\u093e\u0932\u0947 \u0905\u0928\u0941\u0930\u094b\u0927\u094b\u0902 \u0915\u094b \u092b\u093c\u093f\u0932\u094d\u091f\u0930 \u0915\u0930\u0915\u0947 \u0914\u0930 \u092e\u093e\u0928\u094d\u092f \u0915\u0930\u0915\u0947 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u0915\u0940 \u090f\u0915 \u0905\u0924\u093f\u0930\u093f\u0915\u094d\u0924 \u092a\u0930\u0924 \u091c\u094b\u0921\u093c \u0938\u0915\u0924\u0947 \u0939\u0948\u0902, \u091c\u093f\u0938\u0938\u0947 CSRF \u0939\u092e\u0932\u094b\u0902 \u0915\u093e \u091c\u094b\u0916\u093f\u092e \u0915\u092e \u0939\u094b \u091c\u093e\u0924\u093e \u0939\u0948\u0964<\/p>\n

          \u0938\u092e\u094d\u092c\u0902\u0927\u093f\u0924 \u0932\u093f\u0902\u0915\u094d\u0938<\/h2>\n

          \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 \u0914\u0930 \u0935\u0947\u092c \u0905\u0928\u0941\u092a\u094d\u0930\u092f\u094b\u0917 \u0938\u0941\u0930\u0915\u094d\u0937\u093e \u0915\u0947 \u092c\u093e\u0930\u0947 \u092e\u0947\u0902 \u0905\u0927\u093f\u0915 \u091c\u093e\u0928\u0915\u093e\u0930\u0940 \u0915\u0947 \u0932\u093f\u090f, \u0928\u093f\u092e\u094d\u0928\u0932\u093f\u0916\u093f\u0924 \u0938\u0902\u0938\u093e\u0927\u0928\u094b\u0902 \u0915\u093e \u0938\u0902\u0926\u0930\u094d\u092d \u0932\u0947\u0902:<\/p>\n

            \n
          1. OWASP CSRF \u0930\u094b\u0915\u0925\u093e\u092e \u0927\u094b\u0916\u093e \u092a\u0924\u094d\u0930<\/a><\/li>\n
          2. \u092e\u094b\u091c\u093c\u093f\u0932\u093e \u0921\u0947\u0935\u0932\u092a\u0930 \u0928\u0947\u091f\u0935\u0930\u094d\u0915 - \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0930\u093f\u0915\u094d\u0935\u0947\u0938\u094d\u091f \u092b\u093c\u094b\u0930\u094d\u091c\u0930\u0940 (CSRF)<\/a><\/li>\n
          3. \u092a\u094b\u0930\u094d\u091f\u0938\u094d\u0935\u093f\u0917\u0930 - \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 (\u0938\u0940\u090f\u0938\u0906\u0930\u090f\u092b)<\/a><\/li>\n
          4. \u0915\u094d\u0930\u0949\u0938-\u0938\u093e\u0907\u091f \u0905\u0928\u0941\u0930\u094b\u0927 \u091c\u093e\u0932\u0938\u093e\u091c\u0940 \u092c\u093e\u0907\u092c\u093f\u0932<\/a><\/li>\n<\/ol>","protected":false},"featured_media":476482,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476481","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Cross-Site Request Forgery (CSRF) - A Comprehensive Guide<\/mark>","faq_items":[{"question":"What is Cross-Site Request Forgery (CSRF)?","answer":"

            Cross-Site Request Forgery (CSRF) is a type of web security vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users without their knowledge. It exploits the trust between a user's browser and a web application to trick the application into accepting malicious requests.<\/p>"},{"question":"How did CSRF originate, and when was it first mentioned?","answer":"

            The term \"Cross-Site Request Forgery\" was coined in 2001, but the concept of similar attacks was known since the mid-1990s. Researchers first mentioned a vulnerability in the Netscape Navigator browser that allowed attackers to forge HTTP requests back in 1996.<\/p>"},{"question":"How does CSRF work?","answer":"

            CSRF attacks involve the following steps:<\/p>

            1. The user logs into a web application and receives an authentication token.<\/li>
            2. While the user is still logged in, they visit a malicious website or click on a malicious link.<\/li>
            3. The malicious website sends a crafted HTTP request to the target application using the user's credentials.<\/li>
            4. The target application processes the request as if it came from the legitimate user, performing the malicious action.<\/li><\/ol>"},{"question":"What are the key features of CSRF attacks?","answer":"

              Key features of CSRF attacks include:<\/p>

              1. Invisible Exploitation: CSRF attacks occur without the user's awareness.<\/li>
              2. Reliance on User Trust: The attacks rely on the trust between the user's browser and the application.<\/li>
              3. Session-Based: CSRF attacks depend on active user sessions.<\/li>
              4. Impactful Actions: The attacks target state-changing operations with significant consequences.<\/li><\/ol>"},{"question":"What types of CSRF attacks exist?","answer":"

                There are several types of CSRF attacks, including:<\/p>

                1. Simple CSRF: A single forged request is sent to the target application.<\/li>
                2. Blind CSRF: The attacker sends a crafted request without obtaining the response.<\/li>
                3. CSRF with XSS: Attackers combine CSRF with Cross-Site Scripting to execute malicious scripts.<\/li>
                4. CSRF with JSON endpoints: Targeting applications using JSON endpoints, attackers manipulate JSON data for CSRF.<\/li><\/ol>"},{"question":"How can CSRF be prevented and mitigated?","answer":"

                  Preventing and mitigating CSRF attacks involve implementing various techniques, such as:<\/p>

                  1. CSRF Tokens: Use unique tokens in each request to validate its legitimacy.<\/li>
                  2. SameSite Cookies: Utilize SameSite attributes in cookies to restrict their scope.<\/li>
                  3. Custom Request Headers: Add custom headers to validate requests.<\/li>
                  4. Double Submit Cookies: Include a secondary cookie that matches the token value.<\/li><\/ol>"},{"question":"How does CSRF compare to other web vulnerabilities?","answer":"

                    CSRF differs from other web vulnerabilities like Cross-Site Scripting (XSS) and Cross-Site Script Inclusion (XSSI). While XSS focuses on injecting malicious scripts into web pages, CSRF targets state-changing actions by exploiting user trust.<\/p>"},{"question":"What does the future hold for CSRF defense?","answer":"

                    As web technologies evolve, new defense mechanisms, including biometrics, tokenization, and multi-factor authentication, will emerge to counter CSRF attacks. Browser security enhancements and frameworks detecting and preventing CSRF vulnerabilities will play vital roles in mitigating future threats.<\/p>"},{"question":"How are proxy servers associated with CSRF?","answer":"

                    Proxy servers act as intermediaries between users and web applications. In the context of CSRF, they can add an extra layer of security by filtering and validating incoming requests, reducing the risk of CSRF attacks. Properly configured proxy servers can enhance web application security.<\/p>"},{"question":"Where can I find more information about CSRF?","answer":"

                    For more in-depth knowledge about CSRF and web application security, refer to the following resources:<\/p>

                    1. OWASP CSRF Prevention Cheat Sheet<\/a><\/li>
                    2. Mozilla Developer Network - Cross-Site Request Forgery (CSRF)<\/a><\/li>
                    3. PortSwigger - Cross-Site Request Forgery (CSRF)<\/a><\/li>
                    4. The Cross-Site Request Forgery Bible<\/a><\/li><\/ol>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/wiki\/476481","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/wiki\/476481\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/media\/476482"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/in\/wp-json\/wp\/v2\/media?parent=476481"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}