News for hackers. Stuff that matters.

A comment on Hacker News CSRF Vulnerability. Parent comment

Re:Hacker News CSRF Vulnerability by zer01 on Thursday February 25, 2016 @04:11PM (#11177825)
As far as I can tell that particular vulnerability isn't a CSRF at all, it's an insecure JSONP endpoint[1]. The original author is mistaken.

[1] http://homakov.blogspot.com/2013/02/are-you-sure-you-use-jso...

[ Parent | on HN ]

There are no comments on this comment yet.