DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
Web Security Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
Web Security
Why is exposing a state-changing operation (e.g. account deletion) via a GET endpoint especially dangerous for CSRF?
A
GET requests are encrypted differently than POST
B
Browsers trigger GET requests constantly and invisibly (img tags, prefetching), making them forgeable with zero user interaction beyond loading a page
C
GET requests cannot carry cookies at all
D
This isn't actually more dangerous than POST
Check Answer