Basic Authentication Versus CSRF

I was recently involved in an engagement where access was controlled by Basic Authentication. One (1) of the findings I discovered was a Cross-Site Request Forgery (CSRF) vulnerability. The client was unsure of the best approach to prevent CSRF in the context of using Basic Authentication. In this blog post, I will examine the security...

The post Basic Authentication Versus CSRF appeared first on TrustedSec.

access application security assessment authentication basic blog blog post client context cross-site cross-site request forgery csrf engagement findings forgery request security security testing & analysis vulnerability