Vad är No-CSRF?

No-CSRF är en Chrome-tillägg utvecklad av brandonio21, och dess huvudfunktion är "Prevent cookies from being client-side sent cross-origin.".

Tilläggsskärmbilder

Ladda ner No-CSRF-förlängningens CRX-fil

Ladda ner No-CSRF-filändelser i crx-format, installera Chrome-tillägg manuellt i webbläsaren eller dela crx-filerna med vänner för att enkelt installera Chrome-tillägg.

Användarmanual för Tillägg

Cross-Site Request Forgery is a major problem when it comes to browsing the web. If an attacker were to craft a request toward a server that performs an action, the request would contain any identifying cookies you have. As pointed out in academic literature, this can be used to empty bank accounts, change passwords, or anything in between.

This extension attempts to prevent Cross-Site Request Forgery by stripping cookies from any (non-GET) request that does not follow the same-origin policy. In this way, normal browsing remains uninterrupted while any possible CRSF attacks are blocked!

The extension is easily disabled and contains a small report of all requests which had cookies stripped.

This extension is open source and the source code is viewable at https://github.com/brandonio21/no-csrf

This extension is based on a similar extension by avlidienbrunn

Grundläggande Information om Tillägg

Namn	No-CSRF
ID	amababajdpoioajiapncbkhcbpkncepk
Officiell webbadress	https://chromewebstore.google.com/detail/no-csrf/amababajdpoioajiapncbkhcbpkncepk
Beskrivning	Prevent cookies from being client-side sent cross-origin.
Filstorlek	9.58 KB
Antal Installationer	392
Aktuell Version	0.42
Senast Uppdaterad	2016-07-05
Publiceringsdatum	2016-07-04
Betyg	5.00/5 Totalt 1 Betyg
Utvecklare	brandonio21
E-post	[email protected]
Betalningssätt	free
Tilläggswebbplats	https://github.com/brandonio21/no-csrf
Hjälpsida URL	https://github.com/brandonio21/no-csrf
Stödda Språk	en
manifest.json
{ "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx", "manifest_version": 2, "name": "No-CSRF", "version": "0.42", "description": "Prevent cookies from being client-side sent cross-origin.", "icons": { "128": "badge.png" }, "permissions": [ "webRequest", "webRequestBlocking", "tabs", "webNavigation", "" ], "background": { "scripts": [ "background.js" ] }, "browser_action": { "default_icon": "badge.png", "default_popup": "popup.html" } }