Episode 28: Surfin' with CSRFs
Critical Thinking - Bug Bounty Podcast
00:00
CSRF: How to Check Your Cookies
Make sure you're checking your cookies. Same site lacks explicit when it's explicitly set does is not subject to the lacks plus post, um, sort of accommodation that they've made for people transitioning. If same site attribute is not set on a cookie, then that will be same site lacks by default and I can get you some NAs or some informatives if you don't check that. So yeah, keep an eye on that.
Transcript
Play full episode
