Cross-site request forgery (CSRF) prevention
AssigneeInternational Business Machines Corporation
InventorsJohn C. Dayka, Michael P. Kasper, Eysha S. Powers
Life of this patent
Estimating the term…
Loading patent…
AssigneeInternational Business Machines Corporation
InventorsJohn C. Dayka, Michael P. Kasper, Eysha S. Powers
Estimating the term…
A computer program product for cross-site request forgery (CSRF) prevention is provided and includes a computer readable storage medium having program instructions embodied therewith. The program instructions are readable and executable by a processing circuit to cause the processing circuit to issue a server request for a certificate, which is associated with a user, responsive to a client request to visit a uniform resource indicator (URI) being received, validate the certificate upon receipt in fulfillment of the server request, compare a referrer listed in a header of the client request with a list of certificate elements in the certificate, authenticate the user in accordance with correlation between the referrer and at least one of the certificate elements and authorize the client request to visit the URI upon the user being authenticated.
A computer program product for cross-site request forgery (CSRF) prevention, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions being readable and executable by a processing circuit to cause the processing circuit to:
A computer system for cross-site request forgery (CSRF) prevention, the computer system comprising a computer readable storage medium having instructions stored thereon that are executable by a processing circuit to cause the processing circuit to:
Dependencies are inferred from the claim text.