All challenges
Multiple ChoiceIntermediate 30s

CSRF Defense

A CSRF token protects by:
Options
  1. 1Encrypting the session cookie so attackers cannot decrypt its value
  2. 2Rate limiting requests per IP so forged cross-site calls are throttled
  3. 3Hiding the request URL from the attacker by switching to POST bodies
  4. 4Requiring an unpredictable value the attacker can't read cross-site

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle