• A type of malicious exploit of a website where unauthorized commands are transmitted from a user that the web application trusts. There are many ways in which a malicious website can transmit such commands; specially crafted image elements, hidden forms, and JavaScript XMLHttpRequests, for example, can all work without the user’s interaction or even knowledge. Unlike cross-site scripting (XSS), which exploits the trust a user has for a particular site, CSRF exploits the trust that a site has in a user’s browser. ← Wikipedia

1. Related terms: Universal cross-site scripting, Website, Cross-site scripting, Cross-site WebSocket hijacking
2. Previous term: Cross-Platform Component Object Model
3. Next term: Cross-site script inclusion
4. Random term: Release train (webglossary.info/random 🎲)