Skip to main content
Information Security

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

12
  • 6
    Known fact: Your website has be able to work without JavaScript. Commented May 14, 2013 at 8:37
  • 9
    So what? I'll just make Javascript mandatory Commented May 14, 2013 at 8:40
  • 1
    Well whatever, this will not protect you from CSRF IMO. CSRF is about an attacker sending a link to a user tricking him to do something, so I don't see how this will stop it ? Commented May 14, 2013 at 8:41
  • 3
    @HamZaDzCyberDeV If a user running IE 3 hits any site i've created they'll promptly be told to go back to sleep. Commented May 14, 2013 at 9:07
  • 4
    @D3C4FF: Doesn't matter. If your server accepts POST/GET requests without validating the request, it is vulnerable to CSRF. Servers don't care about javascript. Commented May 14, 2013 at 9:38