3 ms·Maybe they mean CSRF? Then things make more sense since you can’t guess the field names cross-origin.by justicz 7y agoMaybe they mean CSRF? Then things make more sense since you can’t guess the field names cross-origin.