4 ms·Maintainer of OpenCart dismisses csrf vulnerability as a user problem.5 points by DrSprout 16y ago