CSRF attack when form data isn’t parsed
How can you do a CRSF attack on express if it only accepts JSON?
Sample Node app:
const express = require(‘express’);
const app = express();
app.use(express.json());
app.post(‘/item’, (req, res, next) => {
console.log(‘posting i… Continue reading CSRF attack when form data isn’t parsed