# CSRF spotter

> Find potential CSRF vulnerabilities

Canonical page: [https://chrome-stats.com/d/csrf-spotter](https://chrome-stats.com/d/csrf-spotter)

## Overview

- **ID:** `csrf-spotter`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Malm
- **Category:** web-development,privacy-security
- **Daily users:** 23
- **Weekly downloads:** 1
- **Version:** 1.0
- **Last updated:** 2019-05-02
- **First published:** 2019-05-02
- **Size:** 10 KB
- **Data as of:** 2026-09-09
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/csrf-spotter/)
- **Website:** [https://github.com/malmers/CSRF](https://github.com/malmers/CSRF)

## Description

CSRF Spotter is a Firefox add-on designed to find potential Cross-Site Request Forgery (CSRF) vulnerabilities by identifying forms without hidden inputs. However, it should be noted that it may generate false positives and false negatives. Use with caution.

## Rankings

- #23,111 — Overall
- #37 — hot spot

## Permissions and access

### Permissions

- `activeTab`

### Content script matches

- `*`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [CSRF Request Checker](https://chrome-stats.com/d/csrf-request-checker)
- [CSRF PoC Generator](https://chrome-stats.com/d/csrf-poc-generator) — 13 users
- [XSS Finder](https://chrome-stats.com/d/xss-finder) — 9 users
- [XSSRush](https://chrome-stats.com/d/xssrush) — 25 users, 4.00 / 5
- [ThirdEye — Web Security Scanner](https://chrome-stats.com/d/thirdeye-web-security-scanner) — 1 users
- [SQL Injection Finder](https://chrome-stats.com/d/sql-injection-finder) — 5 users
- [Common Mistakes Spotter](https://chrome-stats.com/d/common-mistakes-spotter)
- [Vulnerability Scanner](https://chrome-stats.com/d/vulnerability-scanner) — 8 users
- [XSS Finder ext](https://chrome-stats.com/d/xss-finder-ext) — 3 users
- [reSpy](https://chrome-stats.com/d/respy) — 3 users, 5.00 / 5
- [SQL Injection Finder ext](https://chrome-stats.com/d/sql-injection-finder-ext) — 2 users
- [React2shell - RSC Sentinel](https://chrome-stats.com/d/react2shell-rsc-sentinel) — 113 users, 5.00 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/csrf-spotter)