WebAppSec/Secure Coding QA Checklist: Difference between revisions

Line 125: Line 125:


===Desired System Behavior===
===Desired System Behavior===
A random CSRF token or crumb is required. If the request is submitted without the token or with a modified token then the application does not process the requested event.
A random CSRF token/crumb is required when submitting an update action to the server.  
 
 
 
If the request is submitted without the token or with a modified token then the application does not process the requested event.


===Further information===
===Further information===
Confirmed users
491

edits