-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
620f3b0
commit 0d0169f
Showing
11 changed files
with
91 additions
and
34 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,17 @@ | ||
# Cross Site Request Forgery | ||
|
||
<!-- published_date: 21 Jul, 2024 --> | ||
<!-- description: CSRF, XSRF --> | ||
<!-- tags: security, hacking, csrf, xsrf --> | ||
|
||
Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated. With a little help from social engineering (such as sending a link via email or chat), an attacker may trick the users of a web application into executing actions of the attacker’s choosing. | ||
|
||
As represented in this diagram, a Cross Site Request Forgery attack is roughly composed of two parts: | ||
|
||
1. Cross-Site: The user is logged into a website and is tricked into clicking a link in a different website that belongs to the attacker. | ||
The link is crafted by the attacker in a way that it will submit a request to the website the user is logged in to. This represents the “cross-site” part of CSRF. | ||
|
||
2. Request Forgery: The request sent to the user’s website is forged with values crafted by the attacker. | ||
When the victim user opens the link in the same browser, a forged request is sent to the website with values set | ||
by the attacker along with all the cookies that the victim has associated with that website. | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,5 +1,5 @@ | ||
k expose deployment/redis-deployment --port=6379 --target-port=6379 --name=redis --cluster-ip='' | ||
Create a service that expose the deployment with selector "redis-deployment" | ||
|
||
- Create a service that expose the deployment with selector "redis-deployment" | ||
` kubectl expose deployment/redis-deployment --port=6379 --target-port=6379 --name=redis --cluster-ip=` | ||
|
||
kubectl uncordon <node-name> |
6 changes: 5 additions & 1 deletion
6
notes/databases/partining_vs_sharding.md → notes/databases/partitioning_vs_sharding.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -10,3 +10,4 @@ class Note: | |
description: str | ||
tags: str | ||
content: str | ||
view_count: str |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -330,3 +330,7 @@ body { | |
font-size: 0.9rem; | ||
} | ||
} | ||
|
||
.view_count { | ||
font-size: 80%; | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,57 +1,61 @@ | ||
projects/code2image-package:47 | ||
projects/code2image-package:50 | ||
notes/seucurity-context-note:14 | ||
notes/db-docker:19 | ||
projects/instagram-coding-easily:17 | ||
projects:43 | ||
index:291 | ||
projects/instagram-coding-easily:19 | ||
projects:47 | ||
index:305 | ||
notes/command:12 | ||
projects/iscale:17 | ||
projects/what-I-learn:15 | ||
projects/iscale:18 | ||
projects/what-I-learn:18 | ||
notes/test-local-package:13 | ||
projects/climate:18 | ||
projects/mcashpay:22 | ||
projects/renyoo:19 | ||
notes:118 | ||
projects/climate:20 | ||
projects/mcashpay:24 | ||
projects/renyoo:22 | ||
notes:133 | ||
projects/materiality:17 | ||
notes/best-practices:13 | ||
notes/migrate_keycloak_database:14 | ||
notes/4_performance_efficciency:12 | ||
notes/monitor-privoders:12 | ||
notes/6_sustainability:11 | ||
notes/6_sustainability:12 | ||
notes/sargable-queries:12 | ||
notes/1_operational_excellence:14 | ||
projects/coders-tokyo-forum-frontend:13 | ||
notes/1_operational_excellence:15 | ||
projects/coders-tokyo-forum-frontend:17 | ||
notes/deployment-straties:12 | ||
notes/5_cost_optimization:14 | ||
notes/3_reliability:10 | ||
notes/normalization:13 | ||
notes/3_reliability:11 | ||
notes/normalization:14 | ||
notes/useful-commands:12 | ||
notes/bookmark-volume:14 | ||
notes/design-patterns:12 | ||
projects/coders-tokyo-forum-backend:19 | ||
notes/reverse-proxy-vs-proxy-server:12 | ||
notes/instance-purchasing-option:13 | ||
notes/setup-docker-on-ec2-server:15 | ||
notes/volumne_note:13 | ||
notes/volumne_note:14 | ||
notes/service-type:12 | ||
notes/microservice:13 | ||
notes/transactions:13 | ||
notes/microservice:14 | ||
notes/transactions:14 | ||
notes/relationships-join:13 | ||
notes/json_vs_jsonb_type:13 | ||
notes/caching-strategies:16 | ||
notes/caching-strategies:17 | ||
notes/2_security:11 | ||
notes/query-plan:17 | ||
projects/tornomy:24 | ||
notes/union_all:11 | ||
notes/oci-image:12 | ||
notes/indexing:12 | ||
projects/usdol:14 | ||
notes/locking:14 | ||
projects/usdol:16 | ||
notes/locking:16 | ||
notes/lambda:27 | ||
notes/sso:13 | ||
notes/sso:16 | ||
projects/what-i-learn:2 | ||
projects/portfolio:4 | ||
projects/portfolio:5 | ||
notes/argocd-deploy-with-helm:3 | ||
notes/argocd-deployment-trategies:3 | ||
notes/argocd-install-and-create-release:3 | ||
notes/deploy-with-helm.md:2 | ||
notes/concurreny-implementation:17 | ||
notes/install-and-create-release:1 | ||
notes/deployment-trategies:1 | ||
notes/deploy-with-helm:1 |