#csrf
Live, measured metrics for the hashtag #csrf from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #csrf
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · fosstodon.org (Mastodon public tags API) · fetched 2026-11-10 20:21 UTC1 uses by 1 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · fosstodon.org (Mastodon public search API) · fetched 2026-11-10 20:21 UTCLive pulse
measured · fosstodon.org (Mastodon tag timeline) · fetched 2026-11-10 20:21 UTCEverything below is measured over the latest 40 public posts (spanning ~8886 hours).
Posting hours (UTC) — busiest: 07:00
Languages: English (12) · German (12) · Russian (8) · Polish (2) · French (2) · Hungarian (1)
Avg boosts / post: 0.4
Top of the latest posts
huh #mozilla #firefox creates completely unique addon uuids in every deployment, and include this in the "Origin" header of HTTP requests initiated by the addon: https://hister.org/posts/firefox-extension-ids-the-bad-and-the-ugly/ this suck
#CSRF Protection without Tokens or Hidden Form Fields https://blog.miguelgrinberg.com/post/csrf-protection-without-tokens-or-hidden-form-fields #infosec
Руководство по микрофреймворкам Микрофреймворки — это легковесные веб-фреймворки, предоставляющие базовую функциональность, такую как маршрутизация, обработка запросов и ответов, шаблонизация и проверка входных данных. Как правило, они не в
What “csrf” means
WikipediaCross-site request forgery is a type of malicious exploit of a website or web application where unauthorized commands are submitted from a user that the web application trusts. There are many ways in which a malicious website can transmit such commands; specially-crafted image tags, hidden forms, and JavaScript fetch or XMLHttpRequests, for example, can all work without the user's interaction or even knowledge. Unlike cross-site scripting (XSS), which exploits the trust a user has for a particul
“Cross-site request forgery” on Wikipedia (CC BY-SA) →#csrf across platforms
every network with a public tag surfaceFollow #csrf straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/csrf