Zend
ZF-100-500 · Question #48
Which of the following are the limitations for the cross site request forgery (CSRF) attack? Each correct answer represents a complete s olution. Choose all that apply.
The correct answer is A. The attacker must determine the right values for all the form inputs. D. The attacker must target a site that doesn't check the referrer header. See the full explanation below for the reasoning.
Question
Which of the following are the limitations for the cross site request forgery (CSRF) attack? Each correct answer represents a complete s olution. Choose all that apply.
Options
- AThe attacker must determine the right values for all the form inputs.
- BThe target site should authenticate in GET and POST parameters, not only cookies.
- CThe target site should have limited lifetime authentication cookies.
- DThe attacker must target a site that doesn't check the referrer header.
How the community answered
(53 responses)- A85% (45)
- B11% (6)
- C4% (2)
Community Discussion
No community discussion yet for this question.