3 ms·
As the author mentions, simply validating the content-type would have been enough. CSRF is generally not a problem if you validate content-types and/or use Same
by SahAssar 5y ago
As the author mentions, simply validating the content-type would have been enough. CSRF is generally not a problem if you validate content-types and/or use SameSite for cookies, both of which have been recommended for years.