</>SkillRecallRECALL WHAT YOU KNOW
Sign in
Explore Library
Authentication & AuthorizationSession Management & Cookies

24 items

1

Session Timeout: Idle vs Absolute

Flashcard
2

CSRF and Cookie-Based Sessions

Flashcard
3

Secure Session ID Generation

Flashcard
4

Session Fixation Attack

Flashcard
5

Cookies vs LocalStorage for Sessions

Flashcard
6

Secure Attribute

Flashcard
7

Session ID Regeneration

Flashcard
8

Session Hijacking

Flashcard
9

SameSite Attribute

Flashcard
10

Session Invalidation and Logout

Flashcard
11

Signed and Encrypted Cookies

Flashcard
12

Set-Cookie and Cookie Headers

Flashcard
13

Cookie Structure

Flashcard
14

Expires and Max-Age Attributes

Flashcard
15

Session vs Persistent Cookies

Flashcard
16

Domain and Path Attributes

Flashcard
17

Stateful vs Stateless Sessions

Flashcard
18

Session Lifecycle

Flashcard
19

Server-Side vs Client-Side Storage

Flashcard
20

Session ID and User Identification

Flashcard
21

HttpOnly Attribute

Flashcard
22

What is Session Management

Flashcard
23

What is an HTTP Cookie

Flashcard
24

How Cookies Enable Statefulness

Flashcard
FlashcardIntermediate

CSRF and Cookie-Based Sessions

Automatic cookie sending lets attackers forge authenticated cross-site requests.

Question

Why are cookie-based sessions vulnerable to CSRF?

Click to reveal answer