<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>
Anti CSRF Handling
</title>
</head>
<body>
<h1>Anti CSRF Tokens</h1>
<p>
Anti CSRF tokens are (pseudo) random parameters used to protect against Cross Site Request Forgery (CSRF) attacks.<br>
However they also make a penetration testers job harder, especially if the tokens are regenerated every time a form is requested.<br>
</p>
<p>
ZAP detects anti CSRF tokens pu