Firefox introduces (from version 90) support for the Sec-Fetch-Site header, which will help better protect against CSRF attacks
In a recent blog post on Mozilla's site, the new feature introduced in Firefox 90 is discussed, which includes support for Fetch Metadata request headers. This technology aims to enhance user security while browsing the web. Fetch Metadata is a mechanism that allows websites to gain additional insights into the HTTP requests made by users. With these headers, websites can better assess the context in which a request is made and consequently make more informed decisions about how to respond. For example, sites can block requests that appear to be suspicious, significantly reducing the risk of attacks such as Cross-Site Request Forgery (CSRF). This feature not only helps in protecting users but also encourages developers to adopt best practices when handling requests, ultimately leading to a more secure web experience for everyone.