15 ms·

I don’t think CSRF has anything to do with those?

• paulryanrogers 9mo ago
  The endpoints serving those links can't be protected as well. Unless they serve a form that posts, which may not be legal if it requires extra clicks