4 ms·
Sorry curebit. you are on the HN homepage so I CSRF hunt: http://evanlong.github.com/security/web/csrf/curebit.html http://evanlong.github.com/security/web/csrf
by evanlong 15y ago
Sorry curebit. you are on the HN homepage so I CSRF hunt: http://evanlong.github.com/security/web/csrf/curebit.html http://evanlong.github.com/security/web/csrf/curebit.html
You pass in authenticity tokens but don't even bother to check them on the backend.