3 ms·
What you are describing isn't even CSRF
by weird-eye-issue 5y ago
What you are describing isn't even CSRF
- debaserab2 5y agoYes it is - and it's worthwhile to read bawolffs well written explanation of how exactly it could be exploited. Downplaying security vulnerabilities of this sort is precisely how database leaks happen.
- weird-eye-issue 5y agoI don't downplay security issues. I just make sure they are actually understood first and that isn't what is going on here at all. What he is describing is not related to CSRF