News for hackers. Stuff that matters.

A comment on Hacker News CSRF Vulnerability. Parent comment

Re:Hacker News CSRF Vulnerability by lucb1e on Thursday February 25, 2016 @04:05PM (#11177793)
Good points indeed. I never thought of adding anti-CSRF measures to login forms, only while logged in, so I'll start doing that :)
[ Parent | on HN ]
Re:Hacker News CSRF Vulnerability by r1ch on Thursday February 25, 2016 @04:24PM (#11177915)
Another good reason for login CSRF tokens is to prevent a malicious page from submitting lots of invalid logins and getting an account / IP locked or rate limited.
[ Parent | on HN ]