News for hackers. Stuff that matters.

A comment on Hacker News CSRF Vulnerability. Parent comment

Re:Hacker News CSRF Vulnerability by rudolf0 on Thursday February 25, 2016 @04:46PM (#11178085)
What exactly is "logout fixation"? Session/login fixation makes sense, but I can't really imagine what logout fixation would look like. Google was of no help, either. Do you mean a logout function which doesn't properly log you out, or logout CSRF?
[ Parent | on HN ]
Re:Hacker News CSRF Vulnerability by tptacek on Thursday February 25, 2016 @04:56PM (#11178152)
Sorry, that's a typo. I meant "logout CSRF".
[ Parent | on HN ]
Re:Hacker News CSRF Vulnerability by rudolf0 on Thursday February 25, 2016 @05:03PM (#11178212)
Gotcha.
[ Parent | on HN ]