Answer:
In a CSRF attack, the attacker needs to know details about the victim's active session and how requests are authenticated to execute unauthorized actions on the victim's behalf.
In a CSRF attack, the attacker needs to know details about the victim's active session and how requests are authenticated to execute unauthorized actions on the victim's behalf.
You may be interested in:
Web Security MCQs