Now, suppose you are a hacker and you know the URL from where you can register user in CrossSite_RequestForgery application. Now, you created a Forgery site as Attacker_Application and just put the same URL in post method. <\/p>\n
@using (Html.BeginForm(\"Register\", \"Account\", FormMethod.Post, new { @class = \"form-horizontal\", role = \"form\" }))\r\n{\r\n @*@Html.AntiForgeryToken()*@\r\n \/\/ <h4>Create a new account.<\/h4>\r\n \r\n}<\/pre>\n[AllowAnonymous]\r\n public ActionResult Register()\r\n {\r\n return View();\r\n }\r\n\r\n \/\/\r\n \/\/ POST: \/Account\/Register\r\n [HttpPost]\r\n [AllowAnonymous]\r\n \/\/[ValidateAntiForgeryToken]\r\n public async Task<ActionResult> Register(RegisterViewModel model)\r\n {\r\n \r\n return View(model);\r\n }<\/pre>\n<form method=\"post\" action=\"http:\/\/localhost:51506\/Account\/Register\"> \r\n <fieldset> \r\n <legend>Registration Form<\/legend> \r\n <ol> \r\n <li> @Html.LabelFor(m => m.UserName) @Html.TextBoxFor(m => m.UserName) <\/li> \r\n <li> @Html.LabelFor(m => m.Password) @Html.PasswordFor(m => m.Password) <\/li> \r\n <li> @Html.LabelFor(m => m.ConfirmPassword) @Html.PasswordFor(m => m.ConfirmPassword) <\/li> \r\n <\/ol> <input type=\"submit\" value=\"Register\" \/> <\/fieldset> \r\n<\/form><\/pre>\n<form id=\"aspnetForm\" action=\"\/article\/purpose-of-validateantiforgerytoken-in-mvc-application\/\" method=\"post\" data-integralas-id-75abcb8a-c2fb-25b1-46c0-384560e72393=\"\"> <div class=\"b-container page-body\"> <div class=\"b-row\"> <div class=\"content\"> <div class=\"user-content\"> <div class=\"PaddingLeft5\" id=\"div2\">\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"Remark : Run this view, url will be open as: http:\/\/localhost:51506\/Account\/Register Now, suppose you are a hacker and you know the URL from where you can register user in CrossSite_RequestForgery application. Now, you created a Forgery site as Attacker_Application and just put the same URL in post method. @using (Html.BeginForm(“Register”, “Account”, FormMethod.Post, new { @class\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-230","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/mvc.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/pages\/230","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mvc.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mvc.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mvc.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mvc.auctionpro.co.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=230"}],"version-history":[{"count":2,"href":"https:\/\/mvc.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/pages\/230\/revisions"}],"predecessor-version":[{"id":233,"href":"https:\/\/mvc.auctionpro.co.kr\/index.php?rest_route=\/wp\/v2\/pages\/230\/revisions\/233"}],"wp:attachment":[{"href":"https:\/\/mvc.auctionpro.co.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=230"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}