Collected research
CSRF And Ignoring Basic/Digest Auth
CSRF And Ignoring Basic/Digest Auth ha.ckers.org web application security lab
CSRF against routers and similar devices protected by Basic or Digest auth normally raises a login popup that warns the victim. Requesting the target URL through a CSS background-image on a DIV suppresses that dialog in Internet Explorer, so a failed GET-based CSRF stays silent. Other browsers were not found to behave this way, and POST-based CSRF is unaffected.
Record
- Document
- CSRF And Ignoring Basic/Digest Auth ha.ckers.org web application security lab
- Published by
- ha.ckers.org
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .