$ tldr PortSwigger · CSRF (Cross-Site Request Forgery)
CSRF (Cross-Site Request Forgery)
CSRF where Referer validation depends on header being present
PortSwigger Web Security Academy lab: CSRF where Referer validation depends on header being present. Tema: CSRF (Cross-Site Request Forgery).