4 ms·
How did you resolve the problem?
by Figs 15y ago
How did you resolve the problem?
- simcop2387 15y agoI'd probably check to see if they had a valid login already and not update the cookie. Not sure if that opens up other holes though.
- tedunangst 15y agoWe made the CSRF depend only on the user ID, which doesn't change, instead of the session ID.