Explain the concept of 'relying on user's identity' in context of CSRF.
In CSRF, “relying on user’s identity” refers to the exploitation of a website’s trust in a user’s browser. The attacker tricks the victim into executing unwanted actions on a web application where they’re authenticated. This is possible because applications inherently trust requests made by an authenticated user and cannot distinguish between legitimate requests from the user or forged requests sent by an attacker. Therefore, if the user has an active session with privileges, the malicious request will be executed with those same privileges, causing potential damage or data loss.
