CSRF Explained: SameSite Cookies and CSRF Tokens
Cross-site request forgery (CSRF) tricks a logged-in user's browser into sending a request to your site from another site. Because browsers attach cookies automatically, the request arrives with the victim's session. The attack <!-- on evil.example --> <form a...