• A technique where a token, a secret and unique value for each request, is embedded by the web application in all HTML forms and verified on the server side. The token may be generated by any method that ensures unpredictability and uniqueness (e.g., using a hash chain of random seed). The attacker is thus unable to place a correct token in their requests to authenticate them. ← Wikipedia

1. Related terms: Access token · Bearer authentication · Security token · Bearer token
2. Previous term: Synchronized Multimedia Integration Language
3. Next term: Synchronous
4. Random term: XSSI (webglossary.info/random 🎲)