{"id":194919,"date":"2025-04-28T06:25:00","date_gmt":"2025-04-28T05:25:00","guid":{"rendered":"https:\/\/datascientest.com\/en\/?p=194919"},"modified":"2025-05-09T12:26:12","modified_gmt":"2025-05-09T11:26:12","slug":"all-about-cross-site-request-forgery","status":"publish","type":"post","link":"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery","title":{"rendered":"What is a CSRF (Cross-Site Request Forgery)? How to Protect Yourself?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"194919\" class=\"elementor elementor-194919\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-94c5fa4 e-flex e-con-boxed e-con\" data-id=\"94c5fa4\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6f3c569 elementor-widget elementor-widget-text-editor\" data-id=\"6f3c569\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><b>CSRF (Cross-site request forgery) or cross-site request forgery is a type of cyberattack. It involves exploiting a user&#8217;s active session to send malicious requests without their knowledge. Learn how it functions, its dangers, and ways to safeguard yourself!<\/b><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5193108 elementor-widget elementor-widget-text-editor\" data-id=\"5193108\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Imagine unknowingly, while innocently browsing your favorite site, you authorize a <\/span><b>bank transaction<\/b><span style=\"font-weight: 400;\"> or alter your <\/span><b>personal settings<\/b><span style=\"font-weight: 400;\"> on another site where you are logged in. Frightening, isn&#8217;t it?<\/span><\/p><p><span style=\"font-weight: 400;\">This is precisely the kind of mishap that <\/span><b>Cross-Site Request Forgery (CSRF)<\/b><span style=\"font-weight: 400;\"> can cause. This stealthy attack exploits the trust that <\/span><b>websites<\/b><span style=\"font-weight: 400;\"> place in your <\/span><b>browser<\/b><span style=\"font-weight: 400;\">, turning you into an unintentional accomplice&#8230;<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0be2ece elementor-align-center button-principal elementor-widget elementor-widget-button\" data-id=\"0be2ece\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/datascientest.com\/en\/data-courses\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Training in cybersecurity<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-046cf55 e-flex e-con-boxed e-con\" data-id=\"046cf55\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a4090f7 elementor-widget elementor-widget-heading\" data-id=\"a4090f7\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-xl\">A vulnerability<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b372017 elementor-widget elementor-widget-text-editor\" data-id=\"b372017\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">For a cybercriminal, a cross-site <\/span><b>request forgery<\/b><span style=\"font-weight: 400;\"> means tricking an authenticated user into performing unwanted actions on a web application where they are logged in. Simply put, the hacker takes advantage of the user&#8217;s active session to send <\/span><b>malicious requests<\/b><span style=\"font-weight: 400;\"> without them knowing. To better understand, let&#8217;s consider a concrete example.<\/span><\/p><p><span style=\"font-weight: 400;\">Suppose you are logged into your online bank account. Meanwhile, you visit another <\/span><b>compromised or malicious website<\/b><span style=\"font-weight: 400;\">. Unbeknownst to you, this site might contain a <\/span><b>hidden script<\/b><span style=\"font-weight: 400;\"> that sends a request to your bank to <\/span><b>transfer money to the attacker&#8217;s account<\/b><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">Since you are already authenticated, the bank assumes the request is legitimate and executes it. This is the entire <\/span><b>danger of CSRF<\/b><span style=\"font-weight: 400;\">, which exploits the trust established between the user&#8217;s browser and the <\/span><b>targeted website<\/b><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">Unlike other attacks, such as Cross-Site Scripting (XSS), which require the <\/span><b>injection of malicious code<\/b><span style=\"font-weight: 400;\"> into the victim site, CSRF simply hijacks the permissions already granted to the user! For any web developer concerned with the security of their users, understanding and <\/span><b>protecting against CSRF<\/b><span style=\"font-weight: 400;\"> is therefore crucial.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-532a0f0 elementor-widget elementor-widget-image\" data-id=\"532a0f0\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-1.webp\" class=\"attachment-full size-full wp-image-194924\" alt=\"\" srcset=\"https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-1.webp 1000w, https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-1-300x171.webp 300w, https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-1-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2115a24 e-flex e-con-boxed e-con\" data-id=\"2115a24\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e3dbc1a elementor-widget elementor-widget-heading\" data-id=\"e3dbc1a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-xl\">How do hackers exploit the trust of websites?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e202c9a elementor-widget elementor-widget-text-editor\" data-id=\"e202c9a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">CSRF operates by <\/span><b>exploiting the trust<\/b><span style=\"font-weight: 400;\"> that a website places in the user&#8217;s browser. When the user is authenticated to a site, their browser stores <\/span><b>authentication information<\/b><span style=\"font-weight: 400;\">, typically in the form of cookies.<\/span><\/p><p><span style=\"font-weight: 400;\">These cookies are automatically included in subsequent HTTP requests to the same site, allowing for <\/span><b>smooth navigation<\/b><span style=\"font-weight: 400;\"> without requiring constant reauthentication. However, this convenience presents a <\/span><b>vulnerability<\/b><span style=\"font-weight: 400;\">. An attacker can craft a <\/span><b>malicious webpage<\/b><span style=\"font-weight: 400;\"> containing <\/span><b>disguised requests<\/b><span style=\"font-weight: 400;\"> aimed at the site where the user is authenticated.<\/span><\/p><p><span style=\"font-weight: 400;\">If the user visits this page while logged into the target site, their browser, innocently, will send the request with the <\/span><b>authentication cookies<\/b><span style=\"font-weight: 400;\">. The target site will then receive a seemingly legitimate request from the authenticated user, executing the action without the user&#8217;s consent!<\/span><\/p><p><span style=\"font-weight: 400;\">For example, an attacker could insert an <\/span><b>invisible image<\/b><span style=\"font-weight: 400;\"> in a webpage: \u201c&lt;img src=&#8221;http:\/\/bank.example.com\/transfer?account=attacker&amp;amount=1000&#8243; alt=&#8221;Transfer in progress&#8221;&gt;\u201d. If a user authenticated on \u201cbank.example.com\u201d visits this page, their browser will interpret the <\/span><b>&lt;img&gt;<\/b><span style=\"font-weight: 400;\"> tag and send a request to the bank&#8217;s site to transfer 1,000 monetary units to the attacker&#8217;s account, all without the user even noticing!<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f14feac elementor-align-center button-principal elementor-widget elementor-widget-button\" data-id=\"f14feac\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/datascientest.com\/en\/data-courses\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Mastering CSRF attack techniques<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-82f0e57 e-flex e-con-boxed e-con\" data-id=\"82f0e57\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d461235 elementor-widget elementor-widget-heading\" data-id=\"d461235\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-xl\">What can hackers do with a CSRF?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29b9a0b elementor-widget elementor-widget-text-editor\" data-id=\"29b9a0b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Cybercriminals can use <\/span><b>CSRF attacks<\/b><span style=\"font-weight: 400;\"> for a variety of purposes. For instance, an attacker may send a user a <\/span><b>link via email<\/b><span style=\"font-weight: 400;\"> urging them to click on it. However, this link might contain a <\/span><b>request changing the user&#8217;s password<\/b><span style=\"font-weight: 400;\"> on a site where they are authenticated, thereby gaining access to the victim&#8217;s account.<\/span><\/p><p><span style=\"font-weight: 400;\">Furthermore, as mentioned earlier, a user logged into their <\/span><b>online bank account<\/b><span style=\"font-weight: 400;\"> might visit a webpage containing a <\/span><b>script initiating a transfer<\/b><span style=\"font-weight: 400;\"> from their account to the attacker&#8217;s account.<\/span><\/p><p><span style=\"font-weight: 400;\">Another possibility is to force a user to <\/span><b>change the email address<\/b><span style=\"font-weight: 400;\"> associated with their account on an online service. Once the address is changed, the attacker can use the \u201cforgot password\u201d feature to <\/span><b>reset the password and take control of the account<\/b><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">These different examples demonstrate the diversity of CSRF attacks and accentuate the importance of deploying <\/span><b>appropriate protective measures<\/b><span style=\"font-weight: 400;\"> to ensure the security of online users.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9fbcb77 elementor-widget elementor-widget-image\" data-id=\"9fbcb77\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-2.webp\" class=\"attachment-full size-full wp-image-194923\" alt=\"\" srcset=\"https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-2.webp 1000w, https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-2-300x171.webp 300w, https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-2-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-63e1ed4 e-flex e-con-boxed e-con\" data-id=\"63e1ed4\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-728631b elementor-widget elementor-widget-heading\" data-id=\"728631b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-xl\">Techniques and prevention methods<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a5140ea elementor-widget elementor-widget-text-editor\" data-id=\"a5140ea\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Fortunately, several effective strategies can protect against CSRF attacks. The <\/span><b>Synchronizer Token Pattern<\/b><span style=\"font-weight: 400;\"> involves embedding a unique and random token in every form or request that is likely to alter data.<\/span><\/p><p><span style=\"font-weight: 400;\">This <\/span><b>anti-CSRF token<\/b><span style=\"font-weight: 400;\">, generated server-side, is verified with every received request. If the token is absent or incorrect, the request is rejected. This technique is widely recommended for its robustness. Another approach is the use of the <\/span><b>SameSite attribute<\/b><span style=\"font-weight: 400;\"> for cookies. It instructs the browser not to send the cookie during <\/span><b>cross-site requests<\/b><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">By setting this <\/span><b>attribute to \u201cStrict\u201d or \u201cLax\u201d<\/b><span style=\"font-weight: 400;\">, the risks that session cookies will be included in requests originating from other sites are limited. This prevents certain CSRF attacks. Additionally, the server can verify the <\/span><b>origin of requests<\/b><span style=\"font-weight: 400;\"> by examining the <\/span><b>\u201cReferer\u201d or \u201cOrigin\u201d<\/b><span style=\"font-weight: 400;\"> headers. If the origin does not match the expected domain, the request is refused.<\/span><\/p><p><span style=\"font-weight: 400;\">However, although this method adds a <\/span><b>layer of security<\/b><span style=\"font-weight: 400;\">, it can be bypassed and should not serve as the sole protection. Nonetheless, despite these protective measures, insufficient knowledge of <\/span><b>CSRF threats<\/b><span style=\"font-weight: 400;\"> and prevention methods results in vulnerable applications. It is vital to train development teams in web security best practices!<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-95f416e elementor-align-center button-principal elementor-widget elementor-widget-button\" data-id=\"95f416e\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/datascientest.com\/en\/data-courses\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">How to protect against CSRF attacks<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1bc8f00 e-flex e-con-boxed e-con\" data-id=\"1bc8f00\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a53f783 elementor-widget elementor-widget-heading\" data-id=\"a53f783\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-xl\">Top tools and frameworks for protection<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e22aa40 elementor-widget elementor-widget-text-editor\" data-id=\"e22aa40\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Many modern frameworks natively integrate <\/span><b>CSRF attack protections<\/b><span style=\"font-weight: 400;\">. It is, however, important to ensure these protections are properly configured and enabled in your projects.<\/span><\/p><p><span style=\"font-weight: 400;\">The renowned Python framework, <\/span><a href=\"https:\/\/datascientest.com\/en\/django-all-about-the-python-web-development-framework\"><span style=\"font-weight: 400;\">Django<\/span><\/a><span style=\"font-weight: 400;\">, for instance, includes built-in protection against CSRF attacks. With a <\/span><b>specific middleware<\/b><span style=\"font-weight: 400;\"> and <\/span><b>template tags<\/b><span style=\"font-weight: 400;\">, Django automatically generates CSRF tokens for each form and hence ensures a <\/span><b>systematic verification of requests<\/b><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">On the PHP side, <\/span><b>Laravel<\/b><span style=\"font-weight: 400;\"> also provides integrated CSRF protection. Each form automatically includes a <\/span><b>CSRF token<\/b><span style=\"font-weight: 400;\">, and the framework verifies these tokens during form submissions. As a result, any unauthenticated request is blocked.<\/span><\/p><p><span style=\"font-weight: 400;\">For security testing, a must-have tool is <\/span><b>Burp Suite<\/b><span style=\"font-weight: 400;\">. It allows for HTTP request analysis, <\/span><b>detection of potential vulnerabilities<\/b><span style=\"font-weight: 400;\">, including <\/span><b>CSRF flaws<\/b><span style=\"font-weight: 400;\">, and assessment of the effectiveness of protections in place.<\/span><\/p><p><span style=\"font-weight: 400;\">Also noteworthy is the open-source project OWASP CSRFGuard, which provides a <\/span><b>Java library<\/b><span style=\"font-weight: 400;\"> implementing protections against CSRF attacks. It offers an additional layer of security by generating unique tokens for each user session.<\/span><\/p><p><span style=\"font-weight: 400;\">The adoption of these tools and frameworks <\/span><b>facilitates the implementation of robust protection measures against CSRF attacks<\/b><span style=\"font-weight: 400;\">, while also simplifying the process for developers.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fd91b7c elementor-widget elementor-widget-image\" data-id=\"fd91b7c\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1000\" height=\"571\" src=\"https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-3.webp\" class=\"attachment-full size-full wp-image-194922\" alt=\"\" srcset=\"https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-3.webp 1000w, https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-3-300x171.webp 300w, https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest-3-768x439.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bb2d9c2 e-flex e-con-boxed e-con\" data-id=\"bb2d9c2\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d5061cf elementor-widget elementor-widget-heading\" data-id=\"d5061cf\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-xl\">CSRF, a cyberattack as insidious as it is dangerous<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c1f6dd5 elementor-widget elementor-widget-text-editor\" data-id=\"c1f6dd5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">As online interactions become ubiquitous, <\/span><b>the security of web applications<\/b><span style=\"font-weight: 400;\"> is more than ever a priority. <\/span><b>CSRF attacks<\/b><span style=\"font-weight: 400;\">, though discreet, can have devastating consequences for users and businesses. It is therefore essential to adopt a <\/span><b>proactive approach<\/b><span style=\"font-weight: 400;\"> to security.<\/span><\/p><p><span style=\"font-weight: 400;\">By integrating <\/span><b>anti-CSRF protections<\/b><span style=\"font-weight: 400;\"> from the early stages of development, relying on <\/span><a href=\"https:\/\/datascientest.com\/en\/all-about-go-frameworks\"><span style=\"font-weight: 400;\">secure frameworks<\/span><\/a><span style=\"font-weight: 400;\">, and continuously educating teams on best practices, developers can significantly reduce risks associated with these <\/span><b>vulnerabilities<\/b><span style=\"font-weight: 400;\">. Constant vigilance, coupled with the use of appropriate tools, constitutes the <\/span><b>best defense<\/b><span style=\"font-weight: 400;\"> against these <\/span><b>insidious threats<\/b><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">To learn how to thwart CSRF and various types of cyberattacks, you can choose <\/span><b>DataScientest<\/b><span style=\"font-weight: 400;\">. Our assortment of training programs will equip you with the <\/span><b>skills<\/b><span style=\"font-weight: 400;\"> needed to become an analyst, <\/span><b>administrator<\/b><span style=\"font-weight: 400;\">, <\/span><b>consultant<\/b><span style=\"font-weight: 400;\">, or <\/span><a href=\"https:\/\/datascientest.com\/en\/all-about-cybersecurity-engineering\"><span style=\"font-weight: 400;\">cybersecurity engineer<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">Thanks to our practice-oriented pedagogy, you can develop genuine expertise and earn a <\/span><b>state-recognized diploma<\/b><span style=\"font-weight: 400;\"> along with professional certification. We also offer <\/span><b>developer training<\/b><span style=\"font-weight: 400;\"> that emphasizes cybersecurity, enabling you to <\/span><b>create websites and web applications<\/b><span style=\"font-weight: 400;\"> protected against attacks.<\/span><\/p><p><a href=\"https:\/\/datascientest.com\/en\/data-courses\"><span style=\"font-weight: 400;\">All our training courses<\/span><\/a><span style=\"font-weight: 400;\"> can be completed remotely in BootCamp, alternating, or continuous formats, with our organization eligible for funding via CPF or France Travail. <\/span><b>Discover DataScientest!<\/b><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a39419f elementor-align-center button-principal elementor-widget elementor-widget-button\" data-id=\"a39419f\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/datascientest.com\/en\/data-courses\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Discover our courses<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a576e28 elementor-widget elementor-widget-text-editor\" data-id=\"a576e28\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Now you know all about CSRF cyber attacks. For more information on the same subject, take a look at our dossier on XSS attacks, and our general dossier on cyber attacks.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e09054f e-flex e-con-boxed e-con\" data-id=\"e09054f\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-83580fd elementor-widget elementor-widget-html\" data-id=\"83580fd\" data-element_type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<script type=\"application\/ld+json\">\r\n{\r\n  \"@context\": \"https:\/\/schema.org\",\r\n  \"@type\": \"FAQPage\",\r\n  \"mainEntity\": [\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"What is Cross-Site Request Forgery (CSRF)?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"Cross-Site Request Forgery (CSRF) is an attack that forces an authenticated user to perform an undesired action on a website where they are logged in. The attacker exploits the victim's active session to send malicious requests on their behalf.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"How does a CSRF attack work?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"A CSRF attack works by tricking a logged-in user into clicking on a malicious link or visiting a page containing a script that executes fraudulent HTTP requests without their knowledge. This can lead to unwanted actions such as changing account settings, transferring money, or deleting data.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"What are the risks of a CSRF attack?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"The risks include data theft, modification of user information, fraudulent financial transactions, account takeover, and the compromise of a secure system through unintended actions performed by the targeted user.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"How to protect against CSRF attacks?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"Protections against CSRF include using CSRF tokens (CSRF-Tokens) in forms and requests, verifying the origin of requests via HTTP headers (Origin and Referer), using multi-factor authentication (MFA), and restricting sessions to trusted requests only.\"\r\n      }\r\n    },\r\n    {\r\n      \"@type\": \"Question\",\r\n      \"name\": \"What are the differences between a CSRF attack and an XSS attack?\",\r\n      \"acceptedAnswer\": {\r\n        \"@type\": \"Answer\",\r\n        \"text\": \"CSRF forces an authenticated user to perform an unintended action, while Cross-Site Scripting (XSS) injects malicious code into an application to execute scripts on the victim's browser. XSS targets the user and exploits the application, whereas CSRF targets the application by exploiting the user's session.\"\r\n      }\r\n    }\r\n  ]\r\n}\r\n<\/script>\r\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>CSRF (Cross-site request forgery) or cross-site request forgery is a type of cyberattack. It involves exploiting a user&#8217;s active session to send malicious requests without their knowledge. Learn how it functions, its dangers, and ways to safeguard yourself! Imagine unknowingly, while innocently browsing your favorite site, you authorize a bank transaction or alter your personal [&hellip;]<\/p>\n","protected":false},"author":45,"featured_media":194921,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","inline_featured_image":false},"categories":[2426],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.7 (Yoast SEO v21.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What is a CSRF (Cross-Site Request Forgery)? How to Protect Yourself?<\/title>\n<meta name=\"description\" content=\"Discover how CSRF (Cross-Site Request Forgery) attacks exploit your browser to bypass security protections and execute malicious actions without your knowledge. Understand the risks and best practices to protect yourself.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is a CSRF (Cross-Site Request Forgery)? How to Protect Yourself?\" \/>\n<meta property=\"og:description\" content=\"CSRF (Cross-site request forgery) or cross-site request forgery is a type of cyberattack. It involves exploiting a user&#039;s active session to send malicious\" \/>\n<meta property=\"og:url\" content=\"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery\" \/>\n<meta property=\"og:site_name\" content=\"DataScientest\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DataScientestEN\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-28T05:25:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-09T11:26:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Daniel\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:site\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daniel\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery#article\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery\"},\"author\":{\"name\":\"Daniel\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0\"},\"headline\":\"What is a CSRF (Cross-Site Request Forgery)? How to Protect Yourself?\",\"datePublished\":\"2025-04-28T05:25:00+00:00\",\"dateModified\":\"2025-05-09T11:26:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery\"},\"wordCount\":1273,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/datascientest.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery\",\"url\":\"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery\",\"name\":\"What is a CSRF (Cross-Site Request Forgery)? How to Protect Yourself?\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/#website\"},\"datePublished\":\"2025-04-28T05:25:00+00:00\",\"dateModified\":\"2025-05-09T11:26:12+00:00\",\"description\":\"Discover how CSRF (Cross-Site Request Forgery) attacks exploit your browser to bypass security protections and execute malicious actions without your knowledge. Understand the risks and best practices to protect yourself.\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/datascientest.com\/en\/#website\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"name\":\"DataScientest\",\"description\":\"Leader in Data Science Courses\",\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/datascientest.com\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/datascientest.com\/en\/#organization\",\"name\":\"DataScientest\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"contentUrl\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"width\":301,\"height\":301,\"caption\":\"DataScientest\"},\"image\":{\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/DataScientestEN\",\"https:\/\/twitter.com\/DataScientest__\",\"https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/\",\"https:\/\/www.tiktok.com\/@datascientest\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0\",\"name\":\"Daniel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g\",\"caption\":\"Daniel\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/school\/datascientest\/\",\"user\"],\"jobTitle\":\"ing\u00e9nieur logiciel\",\"worksFor\":\"DataScientest\",\"url\":\"https:\/\/datascientest.com\/en\/author\/team-redac\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What is a CSRF (Cross-Site Request Forgery)? How to Protect Yourself?","description":"Discover how CSRF (Cross-Site Request Forgery) attacks exploit your browser to bypass security protections and execute malicious actions without your knowledge. Understand the risks and best practices to protect yourself.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery","og_locale":"en_GB","og_type":"article","og_title":"What is a CSRF (Cross-Site Request Forgery)? How to Protect Yourself?","og_description":"CSRF (Cross-site request forgery) or cross-site request forgery is a type of cyberattack. It involves exploiting a user's active session to send malicious","og_url":"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery","og_site_name":"DataScientest","article_publisher":"https:\/\/www.facebook.com\/DataScientestEN","article_published_time":"2025-04-28T05:25:00+00:00","article_modified_time":"2025-05-09T11:26:12+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/datascientest.com\/en\/files\/2025\/04\/cross-site-request-forgery-datascientest.webp","type":"image\/webp"}],"author":"Daniel","twitter_card":"summary_large_image","twitter_creator":"@DataScientest__","twitter_site":"@DataScientest__","twitter_misc":{"Written by":"Daniel","Estimated reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery#article","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery"},"author":{"name":"Daniel","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0"},"headline":"What is a CSRF (Cross-Site Request Forgery)? How to Protect Yourself?","datePublished":"2025-04-28T05:25:00+00:00","dateModified":"2025-05-09T11:26:12+00:00","mainEntityOfPage":{"@id":"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery"},"wordCount":1273,"commentCount":0,"publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"articleSection":["Cybersecurity"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/datascientest.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery","url":"https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery","name":"What is a CSRF (Cross-Site Request Forgery)? How to Protect Yourself?","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/#website"},"datePublished":"2025-04-28T05:25:00+00:00","dateModified":"2025-05-09T11:26:12+00:00","description":"Discover how CSRF (Cross-Site Request Forgery) attacks exploit your browser to bypass security protections and execute malicious actions without your knowledge. Understand the risks and best practices to protect yourself.","inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/datascientest.com\/en\/all-about-cross-site-request-forgery"]}]},{"@type":"WebSite","@id":"https:\/\/datascientest.com\/en\/#website","url":"https:\/\/datascientest.com\/en\/","name":"DataScientest","description":"Leader in Data Science Courses","publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/datascientest.com\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/datascientest.com\/en\/#organization","name":"DataScientest","url":"https:\/\/datascientest.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","contentUrl":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","width":301,"height":301,"caption":"DataScientest"},"image":{"@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DataScientestEN","https:\/\/twitter.com\/DataScientest__","https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/","https:\/\/www.tiktok.com\/@datascientest"]},{"@type":"Person","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/5a86e30c5090234fb43dd8baa83c44b0","name":"Daniel","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/837acad4f2dc47e85d81cce837261670?s=96&d=mm&r=g","caption":"Daniel"},"sameAs":["https:\/\/www.linkedin.com\/school\/datascientest\/","user"],"jobTitle":"ing\u00e9nieur logiciel","worksFor":"DataScientest","url":"https:\/\/datascientest.com\/en\/author\/team-redac"}]}},"_links":{"self":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/194919"}],"collection":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/users\/45"}],"replies":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/comments?post=194919"}],"version-history":[{"count":10,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/194919\/revisions"}],"predecessor-version":[{"id":195836,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/194919\/revisions\/195836"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media\/194921"}],"wp:attachment":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media?parent=194919"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/categories?post=194919"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/tags?post=194919"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}