100% Free
🎯 3200+ Questions. One Goal: Your Success Sign In Sign Up

What is Anti-Forgery and why is it required?

Junior .NET Core
Quick Answer Anti-Forgery tokens prevent Cross-Site Request Forgery (CSRF) attacks where a malicious site tricks a user's browser into submitting a form to your app. ASP.NET Core generates a hidden form token and a cookie token. On form submission, it verifies both match. The [ValidateAntiForgeryToken] attribute or Razor form tag helpers handle this automatically.

Answer

Anti-forgery protection defends against Cross-Site Request Forgery (CSRF) attacks.

ASP.NET Core generates a pair of correlated tokens: one stored in a cookie and one embedded in the form. On POST, both must be present and valid. This ensures that state-changing requests originate from the legitimate site and user, not from a malicious third-party page.

S
SugharaIQ Editorial Team Verified Answer

This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.

Bookmark Add to Set Notes

Want to bookmark, take notes, or join discussions?

Sign in to access all features and personalize your learning experience.

Sign In Create Account

Source: SugharaIQ

Practice Sets for .NET Core

Related Questions in .NET Core

(10 questions)
What is inheritance?
What is ASP.NET Core and why was it created?
Explain the ASP.NET Core hosting model (Host Builder + Kestrel + Startup flow).
What is Kestrel and why does ASP.NET Core use it?
Explain Middleware and the purpose of the ASP.NET Core Request Pipeline.
Why does the order of middleware matter so much?
What is Dependency Injection in ASP.NET Core and why is it built-in?
Explain the three DI lifetimes (Transient, Scoped, Singleton).
What is Configuration in ASP.NET Core and how does it work?
What is the purpose of IOptions, IOptionsSnapshot, and IOptionsMonitor?
View All .NET Core Questions
Ready to level up? Start Practice