Application uses Double Submit Cookie

Check for session fixation on subdomains
Man in the the middle attack

PreviousCSRF Testing NextApplication validates the Referrer or the Origin of the request received

Last updated 2 years ago