Forum Discussion
IT_Support_-_EC
Nimbostratus
Nimbostratus[BIG-IP 4000s] Failed to protect Crosse-Site Request Forgery
Dear F5 Team,
Our team did PoC of Cross-Site Request Forgery but it seemed
that WAF cannot protect this attack. Our team said
"For the CSRF protection, F5 will generate its own Javascript t...
boneyard
MVP
MVPwhere do they expect to see the token? it won't be in your HTML code, it is only added when the request is actually submitted. the easiest way to see this is by hovering over the link (if there is a link). or by doing a request and capturing the content.
