Which of the following conditions must be given to allow a tester to exploit a Cross-Site Request Forgery (CSRF) vulnerable web application?

Question

Options

• AThe victim user must open the malicious link with an Internet Explorer prior to version 8.
• BThe session cookies generated by the application do not have the HttpOnly flag set.
• CThe victim user must open the malicious link with a Firefox prior to version 3.
• DThe web application should not use random tokens.

• A
  13% (7)
• B
  6% (3)
• C
  4% (2)
• D
  78% (42)

No community discussion yet for this question.