Which attack exploits the trust relationship between a website and a user's browser to perform unauthorized actions?
- XSS
- CSRF
- Clickjacking
- Session Hijacking
Answer: CSRF
CSRF (Cross-Site Request Forgery) tricks authenticated users into executing unwanted actions on a web application where they're logged in. Attacker exploits trust between browser and site. Prevention: anti-CSRF tokens, SameSite cookies, checking referrer headers. Distinct from XSS which injects malicious scripts.