Google also did a very good job introducing security vulnerabilities, and also a sandbox for trying them out. Their take at Cross-Site Request Forgery: http://g

Google also did a very good job introducing security vulnerabilities, and also a sandbox for trying them out. Their take at Cross-Site Request Forgery: http://google-gruyere.appspot.com/part3#3__cross_site_request_forgery http://google-gruyere.appspot.com/part3#3__cross_site_reques... The sandbox: http://google-gruyere.appspot.com/start http://google-gruyere.appspot.com/start