Okuzeka
Web Development vocabulary · Web Security

CSRF

Meaning in web development, with examples

abbreviationAdvanced term

In web development, CSRF means: Cross-Site Request Forgery: an attack that tricks a logged-in user's browser into sending an unwanted request, such as changing an email address, to a site the user trusts.

In Turkish: siteler arası istek sahteciliği, CSRF

How it is used

Often said as 'sea-surf' or letter by letter. Common protections are CSRF tokens in forms and SameSite cookies, and many back-end frameworks include CSRF protection by default.

Example sentences

  1. The form fails with 'CSRF token mismatch' because the page was open for too long.

  2. SameSite cookies make CSRF attacks much harder.

Common collocations

  • CSRF token
  • CSRF protection
  • CSRF attack
  • token mismatch
  • cookieA small piece of data that a website stores in the browser and that is sent back with later requests, used for logins, settings and tracking.
  • cross-site scriptingAn attack in which someone gets harmful JavaScript into a page that other users open, for example through a comment, so that the script runs in their browsers.
  • sessionThe period during which a server remembers a logged-in user, usually through an ID stored in a cookie, until the user logs out or the session expires.
  • formA part of a page where users enter information, such as a login, search or contact form, which is then sent to a server.

This word in other fields

The same English word can have a different meaning in another field:

More terms: Web Security

Practise with graded reading

Reading at the right level is the fastest way to make new words stick. Pick free English books by level: