Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Commit dd3aede

Browse files
authored
Merge pull request #1255 from paroche/patch-4
Update article.md to change "occasionally" to "accidentally"
2 parents ed2fc73 + 3d4a5cc commit dd3aede

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

‎6-data-storage/01-cookie/article.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -192,7 +192,7 @@ To understand how it works and when it's useful, let's take a look at XSRF attac
192192

193193
Imagine, you are logged into the site `bank.com`. That is: you have an authentication cookie from that site. Your browser sends it to `bank.com` with every request, so that it recognizes you and performs all sensitive financial operations.
194194

195-
Now, while browsing the web in another window, you occasionally come to another site `evil.com`. That site has JavaScript code that submits a form `<form action="https://bank.com/pay">` to `bank.com` with fields that initiate a transaction to the hacker's account.
195+
Now, while browsing the web in another window, you accidentally come to another site `evil.com`. That site has JavaScript code that submits a form `<form action="https://bank.com/pay">` to `bank.com` with fields that initiate a transaction to the hacker's account.
196196

197197
The browser sends cookies every time you visit the site `bank.com`, even if the form was submitted from `evil.com`. So the bank recognizes you and actually performs the payment.
198198

0 commit comments

Comments
(0)

AltStyle によって変換されたページ (->オリジナル) /