4 ms·
This is a decent article, but it's really just another "use your framework to mitigate CSRF" article. There's probably been hundreds of them in the last five ye
by languagehacker 14y ago
This is a decent article, but it's really just another "use your framework to mitigate CSRF" article. There's probably been hundreds of them in the last five years. Useful for junior devs who haven't seen it before; uninteresting for most everyone else.
- jamessocol 14y agoWe keep making more junior devs. It's important to drown out the w3schools and bad practices with good practices, so when they look up how to do it, they learn the right way.
- chao- 14y agoSpeaking as someone who is still, arguably, a "junior dev", and who started reading Hacker News as a far-more-junior dev, getting these topics on your radar has to happen somehow. I've learned about many topics' existence by simply bumping into articles like this, and checking the comments to learn more. I do agree the article is little more than introductory, but rather than complain, let's provide some more in-depth links for those who want to learn: http://www.slideshare.net/guestdb261a/csrfrsa2008jeremiahgrossman-349028/ http://www.slideshare.net/guestdb261a/csrfrsa2008jeremiahgro... http://appsandsecurity.blogspot.com/2012/01/stateless-csrf-protection.html http://appsandsecurity.blogspot.com/2012/01/stateless-csrf-p...