3 ms·
Super Logout (Warning ! CSRF logout of many websites)
- Aissen 14y agoAlso, some context on Google's stance regarding this "hole": http://cryptogasm.com/2012/02/does-google-understand-csrf/ http://cryptogasm.com/2012/02/does-google-understand-csrf/ If implemented correctly, it shouldn't be an issue, for example with Rail's authenticity_token: http://mysteps4learning.wordpress.com/2012/10/03/how-authenticity-token-works-in-rails/ http://mysteps4learning.wordpress.com/2012/10/03/how-authent...
- TobbenTM 14y agoThis title should have a warning that it actually logs you out of many services. It is not a blog post.
- Aissen 14y agoYou're right. Updated title while I still can.
- Joyfield 14y agoCool. I modified the logout process of one of my services just now after reading this.