4 ms·Ruby on Rails Description of a CSRF Attack1 points by emson 16y agobittersweet 16y agoPlease keep in mind this is from 18 may 2007... CSRF protection is now enabled by default.