What is CSRF? How does it work on Ruby on Rails applications? | AppSec Expert discusses

Discover the essentials of Cross-Site Request Forgery (CSRF) and its impact on Ruby on Rails applications in our comprehensive video. Join our Chief Research officer, Abhay Bhargav as they delve deep into the world of web security, explaining CSRF, its mechanisms, and how it poses a threat to web applications. Learn about the unique vulnerabilities of Ruby on Rails applications to CSRF attacks and gain insights into effective strategies and techniques to safeguard your apps.
This video is a must-watch for developers, security professionals, and anyone interested in application security. Whether you're new to web development or an experienced programmer, Abhay's breakdown of CSRF will equip you with the knowledge to understand and combat this prevalent security threat. Discover the critical role of authenticity tokens in Rails, explore best practices for securing your applications, and see real-world examples of CSRF defense in action.
🛡️To get access to our FREE List of Secure Default Libraries, goto: www.appsecengineer.com/easy-s...
💙 Get access to courses, labs and challenges on AppSecEngineer: appsecengineer.com
👍 If you enjoyed this content, give this video a like. If you want to watch more of our upcoming videos, consider subscribing to our channel!
Chapters:
0:00 Intro
0:20 Access our FREE list of Secure Default Libraries
1:18 What is CSRF?
4:28 Demo of the attack against a Ruby on Rails Application
14:55 Defending a Ruby on Rails Application against CSRF
#CSRF #webapp #rubyonrails #ruby #cybersecurity #vulnerability #owasptop10 #infosec #appsec #applicationsecurity #training #securedefault #securecoding

[@nishithalva4329]

How about API only applications, is there anything specific we have to do?

[@AppSecEngineer]

CSRF is typically not so much of an issue for api applications. Csrf happens because the browser submits cookies in the request sometimes without the user’s knowledge. In the case of apis Csrf can only happen when there’s a misconfigured frontend or if the api leverages cookies (which is not typical)

[@newuser2474]

How is it different from other csrf attacks?

[@AppSecEngineer]

It’s not really different. The bigger thing to focus on here is how a Ruby on Rails app is rendered vulnerable to csrf and how it can be secured

[@newuser2474]

@@AppSecEngineer got it 👌👍