Multiple choice general knowledge science & technology

Including the unique token in a hidden field can be an effective method for preventing this kind of risk:

  1. Insecure Direct Object References

  2. Insecure Cryptographic Storage

  3. Unvalidated Redirects and Forwards

  4. Cross-Site Request Forgery (CSRF)

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

CSRF tokens are unique, unpredictable values included in forms as hidden fields. When the form is submitted, the server validates this token matches the session token. Since attackers cannot guess or obtain this token, they cannot forge valid requests even if they trick users into submitting forms. This is the primary defense against CSRF.