Skip to main content

NEWNew questions added!Explore now

All questions Frontend interview guide JavaScript interview guide React interview guide HTML & CSS interview guide

Complete simple social tasks to unlock this offer

Pricing Get full accessSign in

Software Engineering Docs

Practice

All questions
All quizzes
All articles

Explore

Dashboard
Time-savers
Frameworks / languages

Account

Sign in
Sign up

Company

About FrontendPro
Editorial team
Editorial policy
Pricing

© 2026 frontendpro. All rights reserved.

Interview questions
/
JavaScript
/
Explain the concept of Cross-Site Request Forgery (CSRF) and its mitigation techniques

JavaScriptMedium

Explain the concept of Cross-Site Request Forgery (CSRF) and its mitigation techniques

By FrontendPro Editorial Team Updated 8/8/2026

#JavaScript

Answer

Cross-Site Request Forgery (CSRF) is an attack where a malicious website tricks a user's browser into making an unwanted request to another site where the user is authenticated. This can lead to unauthorized actions being performed on behalf of the user. Mitigation techniques include using anti-CSRF tokens, SameSite cookies, and ensuring proper CORS configurations.