Poisoned Pipeline / Mitigations / M1880

M1880

Implement Anti-CSRF token

Implementing anti-CSRF tokens, also known as CSRF tokens or synchronization tokens, can be an effective mitigation technique.
A unique token is generated for each user session and included in each form or request.
The server verifies the presence and validity of the token in each incoming request, ensuring that it originated from the same user session and not from a malicious source.

Applies to

• T0188 Cross Site Request Forgery

References

• https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html