As mentioned above, a replay attack by some malicious third party is the most convenient attack.
正如上文所提到的，来自某个恶意第三方的再现攻击是最容易遭受到的攻击。
The browser's same-origin policy does not prevent CSRF attacks because the attack requests are transmitted to the same origin in proxy for the intruding third-party site.
浏览器的同源策略无法阻止CSRF攻击，因为攻击请求被传输到第三方入侵站点的代理中相同的源。
During a CSRF attack, requests originate from an intruding third-party site and are passed through an authenticated browser page to the server.
在一个CSRF攻击过程中，请求源自一个入侵的第三方站点并通过一个已验证的浏览器页面传递到服务器。
This type of attack is often run on websites that run third-party ads.
这种类型的攻击通常是运行在网站运行的第三方广告。
My initial reaction was that this must be coordinated attack by one of the third-party applications that users authorize .
我的第一反应是这是一次由某个拥有用户授权的第三方应用发起的协作攻击。
My initial reaction was that this must be coordinated attack by one of the third-party applications that users authorize .
我的第一反应是这是一次由某个拥有用户授权的第三方应用发起的协作攻击。
应用推荐