If HttpOnly You Could Still CSRF… Of CORS you can!

medium.comsiteby @_graphx

from

Web Security

added

2026-10-10

likes

0

similar

1. ▲
   Wiping Out CSRF medium.com

   site · @jrozner category #web-security link ↗
2. ▲
   CSRF github.com

   site category #fiber link ↗

   Protect from CSRF exploits.

3. ▲
   Stealing CSRF tokens with CSS injection (without iFrames) github.com

   tool category #web-security link ↗
4. ▲
   Neat tricks to bypass CSRF-protection zhuanlan.zhihu.com

   site category #web-security link ↗
5. ▲
   CSRF Protection gist.github.com

   site category #cloudflare link ↗

   Protect any origin from CSRF by verifying origin/referer headers.

   
6. ▲
   PHP SSRF Techniques medium.com

   site category #web-security link ↗

Web Security › Tricks > CSRF: “Written by @GraphX.”