Welcome back everyone.
This is saga from up degree and in this lecture I will tell you what is CSI if CSI stuff is a very common
one day ability and stands for cross site request forgery as the name suggests it's a forgery of request
whenever you do anything on a website your browser sends a request to the Web site and the website send
a response to your browser.
But what if he can steal that request or we can modify that request.
It can lead to stealing of passwords changing of passwords account takeovers changing balances taking
actions sending e-mails friend requests or any other kind of actions that the user never requested but
because he or she clicked on some button or a link which recreated got executed.
Let me tell you what exactly it looks like and practical.
Let's say this website has this changing the password.
I say E and A both of the fields and I say change.
Now you will see that password gets changed right.
And the you know is having password new is equal to E and password confirm is equal to eight.
And action change is equal to change.
Right.
These kind of behavior gives rise to the CSF via this vulnerability is occurring because there is no
way to validate that this request was created by the user or someone else.
And that's how CSR can be very dangerous.
I will continue this series and the next lecture I will show you how to detect.
And security is out of.