2.2 CSRF Detection

How do I know if my application is vulnerable to CSRF ?

The best ways to detect if CSRF attacks are possible in your application are:

• Review new code by a knowledgeable person in secure coding.
• Perform regular pentests or a use DAST scan.
• SAST scans are also capable to detect vulnerable code which could allow CSRF attacks.