Cybersecurity terms, defined properly

• Cross-Site Request ForgeryCSRF

  Cross-site request forgery is a vulnerability in which a site an attacker controls causes a victim browser to send a state-changing request to a different site where the victim is already authenticated, using credentials the browser attaches automatically.

  Web application security·4 flashcards

• Insecure Direct Object ReferenceIDOR

  An insecure direct object reference is an access control failure in which an application uses a user-supplied identifier to select a record and does not check that the requesting user is allowed to see that particular record.

  Access control·5 flashcards

• Server-Side Request ForgerySSRF

  Server-side request forgery is a vulnerability in which an attacker causes a server to make an HTTP request to a destination the attacker chooses, using the server as the origin of that request instead of their own machine.

  Web application security·5 flashcards

• A self-contained definition first

  The opening sentence stands on its own with no antecedents, because that is the passage an answer engine extracts and quotes. If it only makes sense in context, it is not doing its job.

• A worked example with real syntax

  Copyable, server-highlighted, and runnable against something you have permission to test. A definition with no example is a dictionary entry, and there are already dictionaries.

• Commonly confused with

  Two or three sibling terms with a one-line distinction each. This is the highest-value section on the page for citation, because it is inherently comparative and self-contained.

• Where learners actually get it wrong

  A named instructor note carrying judgement a scraper cannot produce. It is also the section that tends to be the reason someone bookmarks the page.

How entries are written, reviewed and corrected