Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
factcheckers
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
4 ms
·
1.
▲
by
factcheckers
9y ago
This line is just incorrect: > The only correct CSRF mitigation is a CSRF token Custom headers are better, imho, if you have an ajax-driven app. There is 0 chance of csrf ever happening if you require the session token be passed in a cus