well, you mentioned very interesting thing. Yes, frameworks are protected. But in fact - the more you make easy to develop - the more it's easy to leave hole. W

well, you mentioned very interesting thing. Yes, frameworks are protected. But in fact - the more you make easy to develop - the more it's easy to leave hole. Well, I'm about Rails now. Surely they have built-in CSRF protection but they also have ugly practise with routing - that's theme of upcoming post.