3 ms·XSS? unrelated here I think. Exactly, cookie forcing/tossing = "set" their CSRF tokenby homakov 13y agoXSS? unrelated here I think. Exactly, cookie forcing/tossing = "set" their CSRF token