#browsers

2 posts

AnalysisApr 24, 2026

Cross Site Request Forgery: Making Your Browser Act Against You

CSRF tricks a logged in user's browser into sending a real, authenticated request they never intended. Here is how it abuses the way browsers handle cookies, and how to shut it down.

8 min read·#csrf#web-security#cookies

AnalysisJan 8, 2026

Clickjacking: When the Button You Click Is Not the Button You See

Clickjacking layers an invisible page over a decoy so your click lands somewhere you never intended. Here is how this user interface trick works and how sites shut it down.

8 min read·#clickjacking#web-security#ui-redress