Poisoned Pipeline / Mitigations / M1882

M1882

Implement Strict Referer Policy

Implementing a strict Referer policy can help mitigate CSRF attacks.
The Referer header is sent by web browsers in HTTP requests and indicates the source of the request. By validating the Referer header on the server side and only allowing requests from trusted sources, CSRF attacks can be mitigated.

Applies to

• T0188 Cross Site Request Forgery

References

• https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
• https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html