1
00:00:01,840 --> 00:00:03,150
[Autogenerated] Here's the module and

2
00:00:03,150 --> 00:00:06,450
course summary at the start of the module,

3
00:00:06,450 --> 00:00:09,930
we saw by example that C. S R F is about

4
00:00:09,930 --> 00:00:12,930
users doing unintentional actions by

5
00:00:12,930 --> 00:00:16,400
misusing cookies. Luckily, there are ways

6
00:00:16,400 --> 00:00:19,570
to mitigate it. Same site cookies is the

7
00:00:19,570 --> 00:00:22,630
way to go. Most of the problems go away.

8
00:00:22,630 --> 00:00:24,770
But I made clear you still have to pay

9
00:00:24,770 --> 00:00:27,400
attention when users work with all the

10
00:00:27,400 --> 00:00:29,970
browsers or where you're exposing. Get

11
00:00:29,970 --> 00:00:33,810
requests that manipulate data. Another way

12
00:00:33,810 --> 00:00:35,820
to mitigate years a ref is we're using

13
00:00:35,820 --> 00:00:38,580
anti forgery tokens in your forms that

14
00:00:38,580 --> 00:00:41,430
work on every browser. Finally, we looked

15
00:00:41,430 --> 00:00:44,400
at best practices for both traditional A

16
00:00:44,400 --> 00:00:46,730
speed Internet applications and single

17
00:00:46,730 --> 00:00:48,870
page applications, and we did a few

18
00:00:48,870 --> 00:00:50,990
experiments to make additional attack

19
00:00:50,990 --> 00:00:58,000
vectors clear. Thank you for watching this course. See you in the next one.

