- A technique where a token, a secret and unique value for each request, is embedded by the web application in all HTML forms and verified on the server side. The token may be generated by any method that ensures unpredictability and uniqueness (e.g., using a hash chain of random seed). The attacker is thus unable to place a correct token in their requests to authenticate them. ← Wikipedia
This term is sponsored by: your name/company?
- Previous term: Synchronized Multimedia Integration Language
- Next term: Synchronous
- Random term: Smoke testing (webglossary.info/random 🎲)