Todos on Blowing in the wind

Todos on Blowing in the wind https://zheng-bobo.github.io/en/todo/ Recent content in Todos on Blowing in the wind Hugo -- gohugo.io en Thu, 04 Feb 2021 17:32:47 +0800 Introduction to CSRF and CORS https://zheng-bobo.github.io/en/todo/csrf-and-cors-introduction/ Thu, 04 Feb 2021 17:32:47 +0800 https://zheng-bobo.github.io/en/todo/csrf-and-cors-introduction/ Introduction Before introducing CRSF(Cross-site request forgery)&CORS(Cross-origin resource sharing), we first introduce HTTP. If readers are familiar with HTTP, they can skip this content directly. HTTP request An HTTP request consists of four parts: request line, request header, blank line and request body. 1 2 3 4 5 6 7 GET /mix/76.html?name=kelvin&password=123456 HTTP/1.1 Host: www.fishbay.cn Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.