3 ms·
> This would still happen even if there was a token or session associated. This is exactly the scenario a CSRF token is support to prevent. But I understand yo
by reza_n 8y ago
> This would still happen even if there was a token or session associated.
This is exactly the scenario a CSRF token is support to prevent. But I understand your point.