>But I'm only interested in the engineering discussion, not the morality play. I'm either. Yes, those all are just security bugs. Known, sometimes fixed, somet

>But I'm only interested in the engineering discussion, not the morality play. I'm either. Yes, those all are just security bugs. Known, sometimes fixed, sometimes reported. But I wont even try to check Alexa Top for XSS - I m pretty sure I won't find anyting. Bugs are different, that's why CSRF seems the most dangerous to me.