3 ms·
CSRF on moneybookers, yfrog and few other sites
well, let's teach develepers.
- nbpoole 15y agoPrevious relevant discussions on HN: - http://news.ycombinator.com/item?id=3791281 http://news.ycombinator.com/item?id=3791281 - http://news.ycombinator.com/item?id=3789673 http://news.ycombinator.com/item?id=3789673 - http://news.ycombinator.com/item?id=3778158 http://news.ycombinator.com/item?id=3778158
- specialist 15y agoEgor, I very much appreciate your efforts. That's a lot of examples, a whole lot work. I'm a complete noob about browser security stuff. So I had to lookup "CSRF". Maybe spell out acronyms or link to their definitions. Cross-site request forgery http://en.wikipedia.org/wiki/Cross-site_request_forgery http://en.wikipedia.org/wiki/Cross-site_request_forgery https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF) https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(... Since I'm working on some public facing websites, and need to learn this stuff, your work is definitely helpful. Thank you.
- xSwag 15y agoThere are CSRF vulns everywhere. Infact, It was a CSRF that got me into the Google Hall of Fame!