3 ms·
Making sure the referer is correct is good enough. Other sites can't without permission send requests with a referer belonging to your site, and that won't chan
by NightlyDev 7y ago
Making sure the referer is correct is good enough. Other sites can't without permission send requests with a referer belonging to your site, and that won't change, unless the spec changes, and that's very very unlikely.
- homakov 7y agoHow about <img> on the page of the victim that triggers some CsRF with GET