CCS
2008
ACM
13 years 6 months ago
2008
ACM
Cross-Site Request Forgery (CSRF) is a widely exploited web site vulnerability. In this paper, we present a new variation on CSRF attacks, login CSRF, in which the attacker forges...
CCS
2008
ACM
13 years 6 months ago
2008
ACM
Unrestricted information flows are a key security weakness of current web design. Cross-site scripting, cross-site request forgery, and other attacks typically require that inform...