Add exploit CSRF in json request about wstg HOT 7 CLOSED

@kingthorin I just explained this case, thanks

from wstg.

Hi @ManhNho, sure go ahead thank you!

from wstg.

I just pull a request for this topic, please review ASAP, thank you!

from wstg.

Absolutely. It could be added to: https://github.com/OWASP/OWASP-Testing-Guide-v5/blob/master/document/4%20Web%20Application%20Security%20Testing/4.7%20Session%20Management%20Testing/4.7.5%20Testing%20for%20CSRF%20(OTG-SESS-005).md

However, note that content hasn't been cleaned up beyond the initial migration from the OWASP wiki.

from wstg.

Perfect,thanks

from wstg.

Thanks, I will close this topic

from wstg.

@ManhNho I did have some review comments on the PR, though it was approved and merged while I was putting them together. I can put together another PR to address them if you could at least answer the question on the "plain text" line.

from wstg.