Multiple choice technology security

Whats the use of adding the CSRF Token to the urls?

  1. Prevent Cross Site Scripting

  2. Prevent Cross Site Request Forgery

  3. Prevent Cross Site Tracing

  4. None of the above
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

CSRF tokens embedded in URLs (or hidden form fields) validate that the request originated from the legitimate application page, not from a malicious third-party site. The token is unpredictable and session-specific, making forged requests invalid. Cross Site Scripting (XSS) is a different vulnerability requiring output encoding. Cross Site Tracing (XST) is a related but distinct attack.

Keep practicing — related questions