CSRF acronym

This commit is contained in:
Thorin-Oakenpants 2018-02-06 23:57:34 +00:00 committed by GitHub
parent ca11a88189
commit 4fdf322193
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -872,7 +872,7 @@ user_pref("network.http.referer.XOriginPolicy", 1);
* 0=send full URI (default), 1=scheme+host+path+port, 2=scheme+host+port ***/
user_pref("network.http.referer.XOriginTrimmingPolicy", 0);
/* 1605: ALL: disable spoofing a referer
* [WARNING] Spoofing effectively disables the anti-CSRF protections that some sites may rely on ***/
* [WARNING] Spoofing effectively disables the anti-CSRF (Cross-Site Request Forgery) protections that some sites may rely on ***/
user_pref("network.http.referer.spoofSource", false);
/* 1606: ALL: set the default Referrer Policy
* 0=no-referer, 1=same-origin, 2=strict-origin-when-cross-origin, 3=no-referrer-when-downgrade