3 ms·

Avoiding cross site request forgery in your web apps

12 points by mmaunder 19y ago

GMail recently fixed a CSRF vulnerability but not before someone lost their domain name to an attacker. A very brief summary of how to avoid the same mistake in your web apps.

maurycy 19y ago
Far better read: http://activereload.net/2007/3/6/your-requests-are-safe-with-us http://activereload.net/2007/3/6/your-requests-are-safe-with... (and plugin attached!)
- mmaunder 19y ago
  Not bad - assuming you're a rails dev.