4 ms·Hello XSRF! Cookie only authentication? Seriously?by driverdan 14y agoHello XSRF! Cookie only authentication? Seriously?timdorr 14y agoThis is only accessed directly via library, so CSRF isn't a factor. Also, everything is happening over SSL.mikeash 14y agoSSL wouldn't save you, but if you never get the magic cookie into a browser then you're safe from XSRF.