3 ms·
otoh, you need a browser signature if you want to avoid CSRF attacks.
by gbog 15y ago
otoh, you need a browser signature if you want to avoid CSRF attacks.
- valiant 15y agoNo, to reliably protect your application from cross site request forgery attacks you usually use auth tokens in the request. So even if there might be a browser-signature based solution for CSRF protection, there is a very solid alternative, which I think is the best practice anyway.