4 ms·

I wonder how many other sites put in CSRF tokens but don't validate.

• mike-cardwell 16y ago
  For every one of these websites, there are probably 10,000 that don't do any CSRF checking at all.