Standard: XSRF

[lukefretwell]

Reference: Standards

What standard do you recommend?

Name: XSRF
Link: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/CSRF
Indicator: Security
Guidance: https://www.cisa.gov/news-events/news/website-security

Why

From CISA:

Implement cross-site scripting (XSS) and cross-site request forgery (XSRF) protections. Protect website systems, as well as website visitors, by implementing XSS and XSRF protections.

Dev

(for ScanGov after review)

Update:

• Guidance: https://github.com/ScanGov/data/blob/main/standards/guidance.json
• Audits: https://github.com/ScanGov/data/blob/main/standards/audits.json
• Review: https://standards.scangov.org/