Google has beefed up the security of Gmail and its other services by adding a feature to login pages that blocks one of the more common forms of web attacks.
The upgrade is designed to protect against CSRF, or cross-site request forgery, attacks. The technique subverts basic website defenses by exploiting the often-misplaced trust one site has in another. Over the past three years, vulnerabilities in Gmail, YouTube, and other Google properties have put user accounts at risk of being accessed by miscreants who use the method.
