Multiple choice technology security

Is CSRF and Cross-site Scripting the same thing.

  1. yes

  2. no

  3. not a valid question

  4. No Idea
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

CSRF (Cross-Site Request Forgery) and XSS (Cross-Site Scripting) are fundamentally different vulnerabilities. XSS injects malicious scripts that execute in the victim's browser, while CSRF tricks the victim's browser into making unauthorized requests using their existing authentication. CSRF requires no script injection - it exploits the browser's automatic cookie behavior.

Keep practicing — related questions