Firefox Improves CSRF Protection With Support For Same-Site Cookies

Discussion in 'Tech news' started by silversurfer, Apr 24, 2018.

  1. silversurfer

    silversurfer Malware Tester Silver Member

    Mozilla engineers are planning to add a new security feature to Firefox with the addition of same-site cookie support in Firefox 60, scheduled for release next month, on May 9.

    The same-site cookie feature is meant to block websites from loading cookies downloaded from other domains that do not match the URL present in the Firefox address bar. For example, with same-site cookie enabled on a website, Firefox won't load cookies from facebook.com if a user is currently visiting domain.com.

    Firefox devs say the same-site cookie feature (also spelled SameSite) is intended to protect users against cross-site request forgery (CSRF) attacks.

    Full Article: https://www.bleepingcomputer.com/ne...rotection-with-support-for-same-site-cookies/
     
    Trim and RGiskardR like this.
  2. Google Adsense

Share This Page