Here’s my go to article on this behaviour: http://blog.opensecurityresearch.com/2012/02/json-csrf-with-parameter-padding.html http://blog.opensecurityresearch.

Here’s my go to article on this behaviour: http://blog.opensecurityresearch.com/2012/02/json-csrf-with-parameter-padding.html http://blog.opensecurityresearch.com/2012/02/json-csrf-with-...