I would like to propose renaming the tag to .

a cross site request forgery attack causes a visitor of a malicious website to send a request to a legit website to which he is already logged in including the session cookie.

The tag was originally abbreviated to fit within the 25 character limit. Now that the maximum tag length has been increased to 35, I don't see any reason not to use the full name, while keeping the abbreviated name as a tag synonym.

  • 10
    I'd be tempted to have csrf as the master, and add cross-site-request-forgery as a tag synonym, as csrf is the commonly used name.
    – Rory Alsop Mod
    Jan 9, 2018 at 22:09
  • 2
    Absolutely agree @RoryAlsop.
    – AviD Mod
    Jan 10, 2018 at 8:43

1 Answer 1


I agree with @RoryAlsop here. Let's keep the main tag and let be a synonym, just in case.

Just as with SQL, which is rarely ever called "Structured Query Language", we should stick to the usage that's most common. XSS and CSRF are well-established acronyms that keep the tag list concise.

  • 2
    +1 both for keeping [csrf], and for adding a synonym.
    – Anders
    Jan 10, 2018 at 13:05

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .