Not only it scalable as it is the only solution. See "Good Patterns & procedures to prevent CSRF": http://www.owasp.org/index.php/Reviewing_code_for_Cross-Site

Not only it scalable as it is the only solution. See "Good Patterns & procedures to prevent CSRF": http://www.owasp.org/index.php/Reviewing_code_for_Cross-Site_Request_Forgery_issues http://www.owasp.org/index.php/Reviewing_code_for_Cross-Site...