Home/ Questions/Q 222271
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T19:06:41+00:00

Are there any transparent library that I can use or something easy so I

  • 0

Are there any transparent library that I can use or something easy so I can prevent cross-site request forgery (CSRF) with Perl and Apache? How can I generate tokens for forms and validating them server-side?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    To protect from “Cross-site request forgery” from server side, it is best to:

    1. Use HTML escape. If you use some template system like Template Toolkit, you should use its escape capabilities. If you use CGI.pm, it has “escapeHTML” sub to do this.
    2. Limit life time of session cookies to relatively short periods. For CGI::Session it can be done with $session->expire($time).
    3. Check referer when outputting vulnerable pages.
    4. Don’t use/accept GET request to modify data.

    Doing this is framework specific but simple.

    • 0