05eb0a61_P_Top_Ten_Cheat_Sheet____OWASP__1
[0] A5 Cross Site Request Forgery [2] Validate CSRF token Validate role is sufficient to perform this action Validate role is sufficient Tip: CSRF is always possible if there is XSS, so make sure XSS is eliminated within your application. [3] Validate role is sufficient to create, read, update, or delete data [1] 
Pre-render Validate user is authenticated Validate role is sufficient for this view Render Send CSRF token Set "secure" and "HttpOnly" flags for session cookies
Difference between revisions of "OWASP Top Ten Cheat Sheet" - OWASP