Assertion: request | /r/MadeOf | parameter
Facets:
Source sentences:
text: This ought to prevent CSRF attacks because it violates the necessary conditions for a CSRF vulnerability: the application no longer relies solely on cookies for session handling, and the request contains a parameter whose value an attacker cannot determine.