Joe a web developer wants to make sure his application is not susceptible to cross-site request
forgery attacks. Which of the following is one way to prevent this type of attack?
A.
The application should always check the HTTP referrer header
B.
The application should always check the HTTP Request header
C.
The application should always check the HTTP Host header
D.
The application should always use SSL encryption
This is A – you have to verify the HTTP Referer header.
The correct answer is A. For more reference:
https://www.owasp.org/index.php/CSRF_Prevention_Cheat_Sheet