CSRFLinks.md

Classified links

Entry-level

0. General information about CSRF
1. Synchronizer Token Pattern
2. Double-Submit Cookie Pattern
3. Leveraging the Encrypted Token Pattern
4. Stateful vs Stateless CSRF Defences
5. Encrypted Token Pattern Diagram (Pic)
6. CSRF Defenses (Slides)
7. Stateless Anti CSRF

Intermediate

0. Advanced Attacks using Cookie Forcing

Miscellaneous

0. Stackexchange forum with real-life examples
1. Why does Double-Submit Cookies require a separate cookie?
2. About CSRF on form submit
3. How does a CSRF token prevent an attack?
4. Double-Submit Cookies vulnerabilities
5. Cryptographically strong CSRF token
6. CSRF attack make the Synchronizer Token Pattern insecure
7. Are CSRF attacks really blind?
8. Is there an appropriate anti CSRF method?)
9. Use a unique CSRF token that is unique for each request
10. It isn't enough for you to implement Double-Submit Cookies in its own sub-domain

Files

1. The Deputies are Still Confuse