Skip to content

Commit 3d4a5cc

Browse files
authored
Update article.md
1 parent a38ab40 commit 3d4a5cc

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

6-data-storage/01-cookie/article.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -192,7 +192,7 @@ To understand how it works and when it's useful, let's take a look at XSRF attac
192192

193193
Imagine, you are logged into the site `bank.com`. That is: you have an authentication cookie from that site. Your browser sends it to `bank.com` with every request, so that it recognizes you and performs all sensitive financial operations.
194194

195-
Now, while browsing the web in another window, you occasionally come to another site `evil.com`. That site has JavaScript code that submits a form `<form action="https://bank.com/pay">` to `bank.com` with fields that initiate a transaction to the hacker's account.
195+
Now, while browsing the web in another window, you accidentally come to another site `evil.com`. That site has JavaScript code that submits a form `<form action="https://bank.com/pay">` to `bank.com` with fields that initiate a transaction to the hacker's account.
196196

197197
The browser sends cookies every time you visit the site `bank.com`, even if the form was submitted from `evil.com`. So the bank recognizes you and actually performs the payment.
198198

0 commit comments

Comments
 (0)