Avoid cross-site request forgery

- [Narrator] Whenever you have portions of an application…important enough that they need to be secured…you've now got to start considering attackers…who will want to break through that security…and access your application through nefarious means.…There are many techniques that attackers use…in order to gain access to sites…but one of the most popular techniques…is the cross-site request forgery attack.…Accordingly, ASP.NET Core MVC provides us a way…to help guard against this attack.…The cross-site request forgery attack…also known as a CSRF, or C surf attack…describes a situation in which an attacker…is able to get ahold of your legitimately…authenticated session and begin sending commands…and submitting data with requests that identify as you.…

Perhaps the most popular implementation of this technique…is for an attacker to create a page…on their site that induces the user to submit…a request to your site.…This request is now sent to your application…as the target user but the attacker…now has complete control over the content…