Notes
Notes - notes.io |
As far as possible try to use POST parameters instead of using GET parameters in your application. But this will only reduce the attack surface for XSRF. This approach will not be adequate to completely mitigate XSRF from you web application.
Checking the HTTP Referrer header would be an effective countermeasure if the web application could rely on its correctness. Unfortunately, modern browsers can be configured to send empty or even arbitrary values for these headers. Moreover, sending the referrer header is discouraged, as it may result in leaking sensitive information to third parties.
Set a short time period for user sessions. Sites requiring the user to be logged in before performing an action can set the user’s session to a short session period (say 5 minutes) to reduce the odds of a successful CSRF attack.
For important actions in your web application, don’t hesitate to ask the user for verification. For e.g. for extremely sensitive actions, consider requiring the user to provide a password in order to authorize the action.
|
|
Notes.io is a web-based application for taking notes. You can take your notes and share with others people. If you like taking long notes, notes.io is designed for you. To date, over 8,000,000,000 notes created and continuing...
With notes.io;
- * You can take a note from anywhere and any device with internet connection.
- * You can share the notes in social platforms (YouTube, Facebook, Twitter, instagram etc.).
- * You can quickly share your contents without website, blog and e-mail.
- * You don't need to create any Account to share a note. As you wish you can use quick, easy and best shortened notes with sms, websites, e-mail, or messaging services (WhatsApp, iMessage, Telegram, Signal).
- * Notes.io has fabulous infrastructure design for a short link and allows you to share the note as an easy and understandable link.
Fast: Notes.io is built for speed and performance. You can take a notes quickly and browse your archive.
Easy: Notes.io doesn’t require installation. Just write and share note!
Short: Notes.io’s url just 8 character. You’ll get shorten link of your note when you want to share. (Ex: notes.io/q )
Free: Notes.io works for 12 years and has been free since the day it was started.
You immediately create your first note and start sharing with the ones you wish. If you want to contact us, you can use the following communication channels;
Email: [email protected]
Twitter: http://twitter.com/notesio
Instagram: http://instagram.com/notes.io
Facebook: http://facebook.com/notesio
Regards;
Notes.io Team
