This project lacks CSRF defense measures. <img width="1327" height="590" alt="Image" src="https://github.com/user-attachments/assets/2d568075-f036-4b3b-b88f-18864a221f8b" /> Use Burp Suite to generate a CSRF PoC for the request package that clears the shopping cart,and then access it while the user is logged in. <img width="1200" height="1072" alt="Image" src="https://github.com/user-attachments/assets/af69087a-3722-443d-89eb-7fa3e42b54cb" /> <img width="1715" height="291" alt="Image" src="https://github.com/user-attachments/assets/f588e76a-02f9-4741-b564-be366f072db5" /> it can be seen that all the items in the shopping cart have been emptied. <img width="1920" height="1080" alt="Image" src="https://github.com/user-attachments/assets/aefbd432-196a-4f98-999e-d6603b6f05a2" /> <img width="1495" height="934" alt="Image" src="https://github.com/user-attachments/assets/209d2e49-171c-4a8c-b7b7-9e82308a3438" />
This project lacks CSRF defense measures.
Use Burp Suite to generate a CSRF PoC for the request package that clears the shopping cart,and then access it while the user is logged in.
it can be seen that all the items in the shopping cart have been emptied.