What is Cross-Site Request Forgery, or CSRF, and why is it dangerous? Explain the different protection mechanisms and how the SameSite cookie attribute has changed CSRF defense strategies.

Sample answer preview

Cross-Site Request Forgery, or CSRF, is an attack that tricks authenticated users into performing unintended actions on a web application. The attacker exploits the trust a site has in the user's browser. Here is how it works.