For those interested in CSRF security in concept and in implementation, including cookie security, check out CsFire: https://distrinet.cs.kuleuven.be/software/

For those interested in CSRF security in concept and in implementation, including cookie security, check out CsFire: https://distrinet.cs.kuleuven.be/software/CsFire/ https://distrinet.cs.kuleuven.be/software/CsFire/ I've used it for many years. And in all that time I've only had to make a half-dozen rules (i.e., whitelist sites, though you can write the rule narrowly) to get specific sites working with it; otherwise it's invisible. It's based on academic research; be sure to look around the site if you're interested.