3 ms·Are you saying its better not to know? It wouldn't be hard determine is a site is CSRF vulnerable.by derrickpetzold 15y agoAre you saying its better not to know? It wouldn't be hard determine is a site is CSRF vulnerable.