网络 跨站请求伪造(cross-site request forgery);跨站点请求伪造;跨站请求伪造攻击
In many cases CSRF and XSS will help to do so.
在许多情况下,CSRF和XSS都有助于这样做。
Some variants use CSRF to pre-load data in forms, some don´t.
一些变种使用CSRF预先加载数据到表单,有些则没有。
Requests can be crafted which will circumvent the CSRF protection entirely.
定制的请求可以完全绕开CSRF保护。
In a CSRF attack, your users can easily become unsuspecting accomplices.
在CSRF攻击中,您的用户可以轻易地成为预料不到的帮凶。
The sequence of requests and responses during a CSRF attack is illustrated in Figure 1.
CSRF 攻击过程中的请求和响应的序列如 图 1 所示。