3 ms·

Csrf is not dependent on js. It happens via normal links on external sites.

• t-writescode 10mo ago
  That's what I said, yes.
  • nchmy 10mo ago
    Sorry, I misread your comment