What is wrong with the CSRF attack description?
A. CSRF requires JavaScript code
B. CSRF attack malicious code is located on a third-party site
C. Filtering user input can prevent malicious code from being injected into a site, but it does not prevent malicious code from running on third-party sites.
D, CSRF conforms to the same-origin policy
Answer:A
What is wrong with the CSRF attack description?
A. CSRF requires JavaScript code B. CSRF attack malicious code is located on a third-party site C. Filtering user input can prevent malicious code from being injected into a site, but it does not prevent malicious code from running on third-party sites. D, CSRF conforms to the same-origin policy