4 ms·
Hope this is secured against cross car request forgery.
by mixedbit 14y ago
Hope this is secured against cross car request forgery.
- driverdan 14y agoMy first thought was "Holy Shit! Cookie only authentication and you can unlock the doors, among other things!" It's absolutely vulnerable to XSRF with cookie only authentication. This is a huge security issue.