Cross-Site Request Forgery (CSRF): Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

[safedep-labs]

[11a76d017e] Cross-Site Request Forgery (CSRF): Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

Description

Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks

Confidence

MEDIUM

Impact

MEDIUM

Code Snippet

    <form method="post" action="/broken_access_lab_1">

        <input id="input" type="text" name="name" placeholder="User Name"><br>
        <input id="input" type="password" name="pass" placeholder="Password"><br>
        <button style="margin-top:20px" class="btn btn-info" type="submit"> Log in</button>


    </form>

Path

introduction/templates/Lab_2021/A1_BrokenAccessControl/broken_access_lab_1.html Col: 9, Line: 11, Offset: 271