Prevention and Mitigation Practices CWE
Because of the same-origin policy, an attacker cannot read or modify the value
stored in the cookie. To successfully submit a form on behalf of the user, the attacker
would have to correctly guess the pseudorandom value. If the pseudorandom value is