In many cases CSRF and XSS will help to do so.
在许多情况下，CSRF和XSS都有助于这样做。
Requests can be crafted which will circumvent the CSRF protection entirely.
定制的请求可以完全绕开CSRF保护。
The sequence of requests and responses during a CSRF attack is illustrated in Figure 1.
CSRF攻击过程中的请求和响应的序列如 图 1 所示。
Finally, make sure your PHP code is resilient to XSS attacks, form spoofs, and CSRF attacks.
最后，确保PHP代码可以抵抗XSS攻击、表单欺骗和CSRF攻击。
In CSRF attacks, unauthorized commands are transmitted from a user that the Web site trusts.
在CSRF攻击中，从Web站点信任的用户处传播未经授权的命令。
Some variants use CSRF to pre-load data in forms, some don't.
一些变种使用CSRF预先加载数据到表单，有些则没有。
CORS does not prevent CSRF, all it does is relax the restrictions enforced by the Same Origin Policy.
CORS不会阻止CSRF，它只是放松同源政策强制执行的限制。
A mashup application or page must address CSRF, Ajax vulnerabilities, XSS, and other potential security weaknesses.
mashup应用程序或页面必须解决CSRF、Ajax漏洞、XSS和其他潜在的安全漏洞。
Whereas XSS attacks exploit the trust a user has in a Web site, CSRF attacks exploit the trust a Web site has in a user.
XSS攻击利用的是用户对网站的信任，CSRF 攻击利用的是网站对用户的信任。
Many intrusion vulnerabilities such as SQL injection, CSRF, and XSS are preventable using a comprehensive input-validation framework.
如果使用一个综合的输入验证框架，许多输入漏洞，如SQL注入、CSRF和XSS，都是可以避免的。
Every edit operation must be accompanied by a token, which ensures the validity of the user request and protects against CSRF attacks.
每个编辑操作必须伴有一个令牌，这可确保用户请求的有效性，并抵御CSRF攻击。
During a CSRF attack, requests originate from an intruder site and are transmitted through an authenticated browser page to the server.
在CSRF攻击过程中，请求来自一个入侵者站点，然后通过一个经过验证的浏览器页面传输到服务器。
You can typically prevent CSRF attacks by requiring that a unique token or cookie be passed with every request, which can be done with Dojo.
您通常可以通过要求每个请求在发送时传递一个惟一的令牌或cookie来阻止CSRF攻击，这可以通过Dojo来完成。
CSRF attacks originate from malicious code from an intruder site that tricks a browser into transmitting unprovoked requests to a trusted site.
CSRF攻击由一个入侵站点的恶意代码发起，该代码欺骗浏览器，使其将无关的请求传输到一个受信任站点。
The server will assume that any requests that lack the correct value in the Request-Token header are CSRF attack attempts and will reject them.
服务器将假设Request - Token头部中缺乏正确的值的任何请求都是CSRF攻击企图并将拒绝它们。
During a CSRF attack, requests originate from an intruding third-party site and are passed through an authenticated browser page to the server.
在一个CSRF攻击过程中，请求源自一个入侵的第三方站点并通过一个已验证的浏览器页面传递到服务器。
CSRF attacks depend on a server assuming that all requests transmitted from the browser that originally started an authenticated session are valid.
CSRF攻击依赖于这样一个服务器假设：来自启动了验证会话的浏览器的所有请求都是有效的。
Jacob gave examples of some of the vulnerabilities like Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), HTTP Response Splitting, Session Fixation, and SQL Injection.
Jacob对其中的一些弱点给出了示例，像跨站点脚本攻击(XSS)、跨站点伪造请求(CSRF)、HTTP响应分割、会话固定攻击以及SQL注入攻击等等。
In addition to handling traditional threats, a mashup application or web page must address such issues as cross-site scripting (XSS) and cross-site request forgery (CSRF), among others.
除了处理传统威胁外，混搭应用程序或web页面必须解决跨站点脚本编写(XSS)和跨站点请求伪造(CSRF)等问题。
In addition to handling traditional threats, a mashup application or web page must address such issues as cross-site scripting (XSS) and cross-site request forgery (CSRF), among others.
除了处理传统威胁外，混搭应用程序或web页面必须解决跨站点脚本编写(XSS)和跨站点请求伪造(CSRF)等问题。
应用推荐