3 ms·
Isn't this CSRF?
by hidden-markov 13y ago
Isn't this CSRF?
- unfed 13y agoCombination of XSS and CSRF.
- benregenspan 13y agoThis seems like it's just plain XSS - it doesn't take advantage of a user's serverside session to forge an action on their behalf.