3 ms·XSS is ok. CSRF is ok. Losing my real password is the worst thing to happenby homakov 14y agoXSS is ok. CSRF is ok. Losing my real password is the worst thing to happen