CSRF Defense Workshop

Four endpoints, four attack scenarios. For each, check every defense that would block the attack without breaking the legitimate flow. False positives cost points.