{"id":10270,"date":"2026-11-08T11:47:00","date_gmt":"2026-11-08T08:47:00","guid":{"rendered":"https:\/\/www.yunuskaytan.com\/?p=10270"},"modified":"2026-11-08T11:47:00","modified_gmt":"2026-11-08T08:47:00","slug":"csrf-saldirisi-nedir","status":"publish","type":"post","link":"https:\/\/www.yunuskaytan.com\/en\/yk\/csrf-saldirisi-nedir\/","title":{"rendered":"CSRF Sald\u0131r\u0131s\u0131 Nedir?"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Web uygulamalar\u0131nda kimlik do\u011frulama s\u00fcre\u00e7leri \u00e7o\u011funlukla taray\u0131c\u0131 tabanl\u0131 oturum \u00e7erezleri (cookies) \u00fczerinden y\u00fcr\u00fct\u00fcl\u00fcr. Bir kullan\u0131c\u0131 bir web sitesine giri\u015f yapt\u0131\u011f\u0131nda, sunucu istemciye bir oturum tan\u0131mlay\u0131c\u0131s\u0131 g\u00f6nderir ve taray\u0131c\u0131 bu bilgiyi saklar. Daha sonra o siteye yap\u0131lan her istekte taray\u0131c\u0131, ilgili \u00e7erezi otomatik olarak pakete dahil eder. Bu davran\u0131\u015f, internetin kullan\u0131m\u0131n\u0131 kolayla\u015ft\u0131rsa da temel bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131na zemin haz\u0131rlar: Siteler Aras\u0131 \u0130stek Sahtecili\u011fi ya da bilinen ad\u0131yla CSRF.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">CSRF Nedir ve Temel Mant\u0131\u011f\u0131 Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A\u00e7\u0131l\u0131m\u0131 Cross-Site Request Forgery olan ve T\u00fcrk\u00e7e kaynaklarda s\u0131kl\u0131kla Siteler Aras\u0131 \u0130stek Sahtecili\u011fi olarak an\u0131lan bu zafiyet, son kullan\u0131c\u0131n\u0131n mevcut yetkilerini k\u00f6t\u00fcye kullanarak haberi olmadan sunucuya istek g\u00f6nderilmesini sa\u011flar. Web geli\u015ftiricilerinin ve g\u00fcvenlik analistlerinin s\u0131kl\u0131kla ara\u015ft\u0131rd\u0131\u011f\u0131 csrf nedir sorusunun yan\u0131t\u0131, taray\u0131c\u0131lar\u0131n otomatik \u00e7erez g\u00f6nderme mekanizmas\u0131nda yatar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bir CSRF sald\u0131r\u0131s\u0131nda hedef, kullan\u0131c\u0131n\u0131n verilerini do\u011frudan \u00e7almak de\u011fildir. CSRF, siteler aras\u0131 betik \u00e7al\u0131\u015ft\u0131rma (XSS) sald\u0131r\u0131lar\u0131ndan farkl\u0131 olarak taray\u0131c\u0131daki oturum bilgilerini okuyamaz. Bunun yerine, hedeflenen web uygulamas\u0131n\u0131n kullan\u0131c\u0131ya duydu\u011fu g\u00fcveni suiistimal eder. Taray\u0131c\u0131, istek bir ba\u011flant\u0131ya t\u0131klanarak m\u0131 yap\u0131ld\u0131 yoksa arkada \u00e7al\u0131\u015fan k\u00f6t\u00fc niyetli bir komut dosyas\u0131 taraf\u0131ndan m\u0131 tetiklendi ay\u0131rt edemez; tek g\u00f6rd\u00fc\u011f\u00fc, ge\u00e7erli oturum \u00e7ereziyle gelen yetkilendirilmi\u015f bir HTTP iste\u011fidir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Bir CSRF Sald\u0131r\u0131s\u0131 Nas\u0131l Ger\u00e7ekle\u015fir?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sald\u0131r\u0131n\u0131n ba\u015far\u0131l\u0131 olabilmesi i\u00e7in belirli ko\u015fullar\u0131n bir araya gelmesi gerekir. Kullan\u0131c\u0131n\u0131n hedef web sitesinde aktif bir oturumunun bulunmas\u0131 ve hedeflenen uygulaman\u0131n gelen isteklerin kayna\u011f\u0131n\u0131 do\u011frulamamas\u0131 \u015fartt\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">S\u00fcrecin ad\u0131m ad\u0131m i\u015fleyi\u015fi \u015fu \u015fekildedir:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Kullan\u0131c\u0131, internet bankac\u0131l\u0131\u011f\u0131 gibi kritik bir sisteme giri\u015f yapar ve taray\u0131c\u0131s\u0131nda ge\u00e7erli bir oturum \u00e7erezi olu\u015fur.<\/li>\n\n<li>Kullan\u0131c\u0131, oturumunu kapatmadan ayn\u0131 taray\u0131c\u0131da ba\u015fka bir sekme a\u00e7ar ve sald\u0131rgan\u0131n kontrol\u00fcndeki tuzak bir web sitesini ziyaret eder ya da zararl\u0131 bir e-posta ba\u011flant\u0131s\u0131na t\u0131klar.<\/li>\n\n<li>Sald\u0131rgan\u0131n sitesinde gizlenmi\u015f olan kodlar, kullan\u0131c\u0131n\u0131n taray\u0131c\u0131s\u0131na hedef banka sunucusuna belirli parametrelerle bir istek atmas\u0131 komutunu verir.<\/li>\n\n<li>Taray\u0131c\u0131, bankan\u0131n alan ad\u0131na giden bu iste\u011fe kullan\u0131c\u0131n\u0131n taray\u0131c\u0131s\u0131nda saklanan banka oturum \u00e7erezlerini otomatik olarak ekler.<\/li>\n\n<li>Banka sunucusu, iste\u011fin ge\u00e7erli bir \u00e7erez ta\u015f\u0131d\u0131\u011f\u0131n\u0131 g\u00f6rerek i\u015flemi onaylar ve talep edilen para transferini ger\u00e7ekle\u015ftirir.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Form Tabanl\u0131 POST \u0130ste\u011fi Senaryosu<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Bir\u00e7ok web sitesi kritik i\u015flemleri POST metoduyla y\u00fcr\u00fct\u00fcr. Ancak POST metodu tek ba\u015f\u0131na CSRF sald\u0131r\u0131s\u0131n\u0131 engellemez. A\u015fa\u011f\u0131daki HTML kodu, sald\u0131rgan\u0131n kendi sitesine yerle\u015ftirebilece\u011fi basit bir otomatik g\u00f6nderim formunu g\u00f6stermektedir:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;form action=\"http:\/\/ornek-banka.com\/hesap\/transfer\" method=\"POST\" id=\"csrfForm\"&gt;\n  &lt;input type=\"hidden\" name=\"alici\" value=\"saldirgan_hesap_no\" \/&gt;\n  &lt;input type=\"hidden\" name=\"miktar\" value=\"10000\" \/&gt;\n&lt;\/form&gt;\n&lt;script&gt;\n  document.getElementById('csrfForm').submit();\n&lt;\/script&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Bu \u00f6rnekte yer alan kod par\u00e7as\u0131, sayfa y\u00fcklendi\u011fi anda JavaScript yard\u0131m\u0131yla formu otomatik olarak hedeflenen adrese postalar. Kurban sayfay\u0131 a\u00e7t\u0131\u011f\u0131nda hi\u00e7bir butona t\u0131klamasa bile transfer iste\u011fi onun yetkisiyle hedefe ula\u015f\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">GET Metodu \u00dczerinden Ger\u00e7ekle\u015ftirilen \u0130stekler<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Durum de\u011fi\u015ftiren (veritaban\u0131nda kay\u0131t silen, \u015fifre de\u011fi\u015ftiren veya veri g\u00fcncelleyen) i\u015flemlerin GET istekleriyle y\u00fcr\u00fct\u00fclmesi, CSRF riskini katbekat art\u0131r\u0131r. Sald\u0131rgan bu durumda JavaScript \u00e7al\u0131\u015ft\u0131rmaya bile gerek duymaz.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;img src=&quot;http:\/\/ornek-uygulama.com\/profil\/sifre-sifirla?yeni_sifre=123456&quot; width=&quot;0&quot; height=&quot;0&quot; \/&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Taray\u0131c\u0131, g\u00f6rseli y\u00fcklemek i\u00e7in belirtilen URL adresine bir GET iste\u011fi yapar. Kullan\u0131c\u0131n\u0131n oturumu a\u00e7\u0131ksa, \u015fifre s\u0131f\u0131rlama i\u015flemi arka planda sessizce ger\u00e7ekle\u015fir. Bu nedenle HTTP standartlar\u0131na g\u00f6re GET istekleri yaln\u0131zca veri okuma ama\u00e7l\u0131 olmal\u0131, asla sistem \u00fczerinde kal\u0131c\u0131 de\u011fi\u015fiklik yaratmamal\u0131d\u0131r.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">CSRF Sald\u0131r\u0131lar\u0131ndan Korunma Y\u00f6ntemleri<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CSRF a\u00e7\u0131klar\u0131n\u0131 kapatmak, kullan\u0131c\u0131 taraf\u0131nda de\u011fil tamamen sunucu ve uygulama mimarisi taraf\u0131nda al\u0131nacak \u00f6nlemlere ba\u011fl\u0131d\u0131r. Modern web uygulamalar\u0131nda bu a\u00e7\u0131\u011f\u0131 engellemek i\u00e7in kabul g\u00f6rm\u00fc\u015f standart yakla\u015f\u0131mlar bulunmaktad\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Anti-CSRF Belirteci (Token) Kullan\u0131m\u0131<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">CSRF korumas\u0131n\u0131n temel ta\u015f\u0131 &#8220;Synchronizer Token Pattern&#8221; y\u00f6ntemidir. Bu yap\u0131da, sunucu her kullan\u0131c\u0131 oturumu veya her form i\u00e7in kriptografik olarak g\u00fcvenli, tahmin edilemez ve tekil bir belirte\u00e7 (token) \u00fcretir.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;form action=\"\/profil\/guncelle\" method=\"POST\"&gt;\n  &lt;input type=\"hidden\" name=\"csrf_token\" value=\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\" \/&gt;\n  &lt;input type=\"text\" name=\"eposta\" \/&gt;\n  &lt;button type=\"submit\"&gt;Kaydet&lt;\/button&gt;\n&lt;\/form&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Kullan\u0131c\u0131 formu g\u00f6nderdi\u011finde, sunucu formdan gelen <code>csrf_token<\/code> de\u011feri ile kullan\u0131c\u0131n\u0131n oturumunda saklanan de\u011feri kar\u015f\u0131la\u015ft\u0131r\u0131r. Sald\u0131rgan, \u00fc\u00e7\u00fcnc\u00fc taraf bir siteden istek g\u00f6nderirken kurban\u0131n hesab\u0131na atanm\u0131\u015f bu gizli belirteci bilemeyece\u011fi i\u00e7in istek sunucu taraf\u0131ndan reddedilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">SameSite \u00c7erez \u00d6zniteli\u011fi<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Modern taray\u0131c\u0131lar, \u00e7erezlerin hangi durumlarda isteklerle birlikte g\u00f6nderilece\u011fini belirleyen <code>SameSite<\/code> niteli\u011fini destekler. \u00c7erez tan\u0131mlan\u0131rken bu parametrenin ayarlanmas\u0131 CSRF riskini b\u00fcy\u00fck \u00f6l\u00e7\u00fcde ortadan kald\u0131r\u0131r.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Set-Cookie: oturum_id=abc123xyz; Secure; HttpOnly; SameSite=Lax<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Bu ba\u015fl\u0131kta yer alan yap\u0131land\u0131rma se\u00e7enekleri \u015fu \u015fekildedir:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Strict: \u00c7erez, yaln\u0131zca istek do\u011frudan sitenin kendi i\u00e7inden yap\u0131ld\u0131\u011f\u0131nda g\u00f6nderilir. D\u0131\u015far\u0131dan verilen hi\u00e7bir ba\u011flant\u0131da \u00e7erez iletilmez.<\/li>\n\n<li>Lax: Varsay\u0131lan g\u00fcvenli se\u00e7enektir. \u00dc\u00e7\u00fcnc\u00fc taraf sitelerden gelen POST veya iframe isteklerinde \u00e7erez g\u00f6nderilmez; yaln\u0131zca \u00fcst d\u00fczey (top-level) gezinme sa\u011flayan g\u00fcvenli ba\u011flant\u0131 t\u0131klamalar\u0131nda (GET) iletilir.<\/li>\n\n<li>None: \u00c7erez her ko\u015fulda iletilir. Bu se\u00e7ene\u011fin \u00e7al\u0131\u015fmas\u0131 i\u00e7in <code>Secure<\/code> \u00f6zniteli\u011fiyle birlikte HTTPS \u00fczerinden kullan\u0131lmas\u0131 zorunludur ve CSRF korumas\u0131 sa\u011flamaz.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\u00c7ift \u00c7erez G\u00f6nderimi (Double Submit Cookie)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u00d6zellikle sunucusuz (stateless) mimarilerde veya API odakl\u0131 tek sayfa uygulamalar\u0131nda (SPA) oturum durumunu sunucuda saklamak maliyetli olabilir. \u00c7ift \u00e7erez g\u00f6nderimi y\u00f6nteminde, rastgele bir belirte\u00e7 hem \u00e7erez olarak istemciye verilir hem de yap\u0131lacak isteklerde bir ba\u015fl\u0131k (header) veya form alan\u0131 olarak talep edilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0130stemci taraf\u0131ndaki me\u015fru JavaScript kodu \u00e7erezden bu de\u011feri okuyup iste\u011fin ba\u015fl\u0131\u011f\u0131na ekler:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fetch('\/api\/veri-kaydet', {\n  method: 'POST',\n  headers: {\n    'Content-Type': 'application\/json',\n    'X-CSRF-TOKEN': 'belirtec_degeri'\n  },\n  body: JSON.stringify({ veri: 'test' })\n});<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Ayn\u0131 K\u00f6ken Politikas\u0131 (Same-Origin Policy) gere\u011fi, sald\u0131rgan \u00fc\u00e7\u00fcnc\u00fc taraf bir siteden kurban\u0131n \u00e7erezini do\u011frudan okuyamaz. Dolay\u0131s\u0131yla iste\u011fin g\u00f6vdesine veya ba\u015fl\u0131\u011f\u0131na bu belirteci ekleyemez. Sunucu, ba\u015fl\u0131ktaki de\u011fer ile \u00e7erezdeki de\u011feri kar\u015f\u0131la\u015ft\u0131rarak do\u011frulamay\u0131 tamamlar.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00d6zet ve Sonraki Ad\u0131mlar<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CSRF, taray\u0131c\u0131lar\u0131n otomatik kimlik do\u011frulama mekanizmalar\u0131n\u0131 istismar eden ve kritik i\u015flemlerin yetkisiz bi\u00e7imde y\u00fcr\u00fct\u00fclmesine yol a\u00e7an \u00f6nemli bir g\u00fcvenlik zafiyetidir. Yaln\u0131zca GET metodunun veri de\u011fi\u015ftiren i\u015flemlerde kullan\u0131lmamas\u0131 tek ba\u015f\u0131na yeterli de\u011fildir; mutlaka Anti-CSRF belirte\u00e7leri ve do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015f SameSite \u00e7erez politikalar\u0131 devreye al\u0131nmal\u0131d\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Uygulaman\u0131z\u0131n g\u00fcvenli\u011fini art\u0131rmak i\u00e7in ilk ad\u0131m olarak t\u00fcm durum de\u011fi\u015ftiren u\u00e7 noktalar\u0131n\u0131z\u0131 (endpoints) g\u00f6zden ge\u00e7irin, oturum \u00e7erezlerinize <code>SameSite=Lax<\/code> veya <code>SameSite=Strict<\/code> bayraklar\u0131n\u0131 ekleyin ve kulland\u0131\u011f\u0131n\u0131z web \u00e7at\u0131s\u0131n\u0131n (framework) yerle\u015fik CSRF koruma katmanlar\u0131n\u0131n aktif oldu\u011fundan emin olun.<\/p>","protected":false},"excerpt":{"rendered":"<p>CSRF (Cross-Site Request Forgery), kullan\u0131c\u0131lar\u0131n yetkilerini k\u00f6t\u00fcye kullanan sinsi bir web zafiyetidir. Bu rehberde \u00e7al\u0131\u015fma mant\u0131\u011f\u0131n\u0131 ve korunma yollar\u0131n\u0131 inceliyoruz.<\/p>","protected":false},"author":1,"featured_media":10271,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[229],"tags":[572,11,573,302,323],"class_list":["post-10270","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-siber-guvenlik","tag-csrf","tag-siber-guvenlik","tag-uygulama-guvenligi","tag-web-gelistirme","tag-web-guvenligi"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CSRF Sald\u0131r\u0131s\u0131 Nedir? - Yunus KAYTAN<\/title>\n<meta name=\"description\" content=\"CSRF nedir ve web uygulamalar\u0131n\u0131 nas\u0131l tehdit eder? Siteler Aras\u0131 \u0130stek Sahtecili\u011fi mekanizmas\u0131, \u00f6rnek senaryolar\u0131 ve korunma y\u00f6ntemleri bu rehberde.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.yunuskaytan.com\/en\/yk\/csrf-saldirisi-nedir\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CSRF Sald\u0131r\u0131s\u0131 Nedir? - Yunus KAYTAN\" \/>\n<meta property=\"og:description\" content=\"CSRF nedir ve web uygulamalar\u0131n\u0131 nas\u0131l tehdit eder? Siteler Aras\u0131 \u0130stek Sahtecili\u011fi mekanizmas\u0131, \u00f6rnek senaryolar\u0131 ve korunma y\u00f6ntemleri bu rehberde.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.yunuskaytan.com\/en\/yk\/csrf-saldirisi-nedir\/\" \/>\n<meta property=\"og:site_name\" content=\"Yunus KAYTAN\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-08T08:47:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/csrf-saldirisi-nedir-kapak.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"yunuskaytan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"yunuskaytan\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/\"},\"author\":{\"name\":\"yunuskaytan\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#\\\/schema\\\/person\\\/be66986fb499da83a5685de34f68d15a\"},\"headline\":\"CSRF Sald\u0131r\u0131s\u0131 Nedir?\",\"datePublished\":\"2026-11-08T08:47:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/\"},\"wordCount\":1216,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/blog-kapak\\\/csrf-saldirisi-nedir-kapak.jpg\",\"keywords\":[\"csrf\",\"siber g\u00fcvenlik\",\"uygulama g\u00fcvenli\u011fi\",\"web gelistirme\",\"web guvenligi\"],\"articleSection\":[\"Siber G\u00fcvenlik\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/\",\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/\",\"name\":\"CSRF Sald\u0131r\u0131s\u0131 Nedir? - Yunus KAYTAN\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/blog-kapak\\\/csrf-saldirisi-nedir-kapak.jpg\",\"datePublished\":\"2026-11-08T08:47:00+00:00\",\"description\":\"CSRF nedir ve web uygulamalar\u0131n\u0131 nas\u0131l tehdit eder? Siteler Aras\u0131 \u0130stek Sahtecili\u011fi mekanizmas\u0131, \u00f6rnek senaryolar\u0131 ve korunma y\u00f6ntemleri bu rehberde.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/blog-kapak\\\/csrf-saldirisi-nedir-kapak.jpg\",\"contentUrl\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/blog-kapak\\\/csrf-saldirisi-nedir-kapak.jpg\",\"width\":1200,\"height\":630,\"caption\":\"CSRF Sald\u0131r\u0131s\u0131 Nedir?\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/csrf-saldirisi-nedir\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\\\/\\\/www.yunuskaytan.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CSRF Sald\u0131r\u0131s\u0131 Nedir?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#website\",\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/\",\"name\":\"Yunus KAYTAN\",\"description\":\"Bili\u015fim, Siber G\u00fcvenlik, Siber Su\u00e7lar ve Sosyal M\u00fchendislik\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.yunuskaytan.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#organization\",\"name\":\"Bili\u015fim, Siber G\u00fcvenlik, Siber Su\u00e7lar ve Sosyal M\u00fchendislik\",\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/2021\\\/07\\\/cropped-BILISIM-VE-SIBER-GUVENLIK.png\",\"contentUrl\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/2021\\\/07\\\/cropped-BILISIM-VE-SIBER-GUVENLIK.png\",\"width\":400,\"height\":109,\"caption\":\"Bili\u015fim, Siber G\u00fcvenlik, Siber Su\u00e7lar ve Sosyal M\u00fchendislik\"},\"image\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#\\\/schema\\\/person\\\/be66986fb499da83a5685de34f68d15a\",\"name\":\"yunuskaytan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g\",\"caption\":\"yunuskaytan\"},\"sameAs\":[\"http:\\\/\\\/www.yunuskaytan.com\"],\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/en\\\/yk\\\/author\\\/yunuskaytan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CSRF Sald\u0131r\u0131s\u0131 Nedir? - Yunus KAYTAN","description":"CSRF nedir ve web uygulamalar\u0131n\u0131 nas\u0131l tehdit eder? Siteler Aras\u0131 \u0130stek Sahtecili\u011fi mekanizmas\u0131, \u00f6rnek senaryolar\u0131 ve korunma y\u00f6ntemleri bu rehberde.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.yunuskaytan.com\/en\/yk\/csrf-saldirisi-nedir\/","og_locale":"en_US","og_type":"article","og_title":"CSRF Sald\u0131r\u0131s\u0131 Nedir? - Yunus KAYTAN","og_description":"CSRF nedir ve web uygulamalar\u0131n\u0131 nas\u0131l tehdit eder? Siteler Aras\u0131 \u0130stek Sahtecili\u011fi mekanizmas\u0131, \u00f6rnek senaryolar\u0131 ve korunma y\u00f6ntemleri bu rehberde.","og_url":"https:\/\/www.yunuskaytan.com\/en\/yk\/csrf-saldirisi-nedir\/","og_site_name":"Yunus KAYTAN","article_published_time":"2026-11-08T08:47:00+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/csrf-saldirisi-nedir-kapak.jpg","type":"image\/jpeg"}],"author":"yunuskaytan","twitter_card":"summary_large_image","twitter_misc":{"Written by":"yunuskaytan","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/#article","isPartOf":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/"},"author":{"name":"yunuskaytan","@id":"https:\/\/www.yunuskaytan.com\/#\/schema\/person\/be66986fb499da83a5685de34f68d15a"},"headline":"CSRF Sald\u0131r\u0131s\u0131 Nedir?","datePublished":"2026-11-08T08:47:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/"},"wordCount":1216,"commentCount":0,"publisher":{"@id":"https:\/\/www.yunuskaytan.com\/#organization"},"image":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/#primaryimage"},"thumbnailUrl":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/csrf-saldirisi-nedir-kapak.jpg","keywords":["csrf","siber g\u00fcvenlik","uygulama g\u00fcvenli\u011fi","web gelistirme","web guvenligi"],"articleSection":["Siber G\u00fcvenlik"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/","url":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/","name":"CSRF Sald\u0131r\u0131s\u0131 Nedir? - Yunus KAYTAN","isPartOf":{"@id":"https:\/\/www.yunuskaytan.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/#primaryimage"},"image":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/#primaryimage"},"thumbnailUrl":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/csrf-saldirisi-nedir-kapak.jpg","datePublished":"2026-11-08T08:47:00+00:00","description":"CSRF nedir ve web uygulamalar\u0131n\u0131 nas\u0131l tehdit eder? Siteler Aras\u0131 \u0130stek Sahtecili\u011fi mekanizmas\u0131, \u00f6rnek senaryolar\u0131 ve korunma y\u00f6ntemleri bu rehberde.","breadcrumb":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/#primaryimage","url":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/csrf-saldirisi-nedir-kapak.jpg","contentUrl":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/csrf-saldirisi-nedir-kapak.jpg","width":1200,"height":630,"caption":"CSRF Sald\u0131r\u0131s\u0131 Nedir?"},{"@type":"BreadcrumbList","@id":"https:\/\/www.yunuskaytan.com\/yk\/csrf-saldirisi-nedir\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/www.yunuskaytan.com\/"},{"@type":"ListItem","position":2,"name":"CSRF Sald\u0131r\u0131s\u0131 Nedir?"}]},{"@type":"WebSite","@id":"https:\/\/www.yunuskaytan.com\/#website","url":"https:\/\/www.yunuskaytan.com\/","name":"Yunus KAYTAN","description":"Information Technology, Cybersecurity, Cybercrimes and Social Engineering","publisher":{"@id":"https:\/\/www.yunuskaytan.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.yunuskaytan.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.yunuskaytan.com\/#organization","name":"Information Technology, Cybersecurity, Cybercrimes and Social Engineering","url":"https:\/\/www.yunuskaytan.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.yunuskaytan.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/2021\/07\/cropped-BILISIM-VE-SIBER-GUVENLIK.png","contentUrl":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/2021\/07\/cropped-BILISIM-VE-SIBER-GUVENLIK.png","width":400,"height":109,"caption":"Bili\u015fim, Siber G\u00fcvenlik, Siber Su\u00e7lar ve Sosyal M\u00fchendislik"},"image":{"@id":"https:\/\/www.yunuskaytan.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.yunuskaytan.com\/#\/schema\/person\/be66986fb499da83a5685de34f68d15a","name":"yunuskaytan","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g","caption":"yunuskaytan"},"sameAs":["http:\/\/www.yunuskaytan.com"],"url":"https:\/\/www.yunuskaytan.com\/en\/yk\/author\/yunuskaytan\/"}]}},"_links":{"self":[{"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/posts\/10270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/comments?post=10270"}],"version-history":[{"count":1,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/posts\/10270\/revisions"}],"predecessor-version":[{"id":10274,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/posts\/10270\/revisions\/10274"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/media\/10271"}],"wp:attachment":[{"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/media?parent=10270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/categories?post=10270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/tags?post=10270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}