In the previous video, we looked into what is the sort of official how a hackers can perform a set
of attacks in this video.
Let's try to resolve that CSR issue, which we encountered inside our application by following the most
simple approach, which is by disabling itself, as we discussed by default, any Web application or
any Web framework will stop the communication if someone is using or post delete duty methods, which
will potentially alter the data using causative issue.
But really, that might be a valid issues where you don't want to handle all this CSR tokens and everything
because you have all the firewalls inside your organization.
The outside hackers cannot access your links.
So in such scenarios, we just have to simply disable CSR inside our spring security framework.
When we disable it clearly indicates I don't want to have any CSR tokens to be handled and all operations,
including get or delete post, has to be accepted by my application for that.
Come to the same class project security conflict not hour after hour US configurations we can look for
sort of return.
On top of that, we have a separate matter we can pass.
So that's within is two words we can disable and CSR inside insider applications.
Now I have made the continuous let's try to go to the starting class and start the server again.
Now I'll go to manually navigate the login page and bring credentialled happy a third example dot com.
One, two, three, four, five.
Now I'm clicking the balance section and you can see now my balance controller went to the database,
looked all the transaction details associated with my user and display that.
What is the latest to current balance as you can go and check in the database as well by going to the
account transactions here, you can see there are for the user customer eighty one six Rosada.
That's why here we have six rules followed by total current balance.
So with this we resolve the CSR issue by disabling it.
But disabling is not a solution always and it's not recommended also when your application is open to
the outside world so far that we should really handle CSR by leveraging CSR of tokens inside your application.
Let's try to go and explore that more in the next room.
Thank you.
And by.