News for hackers. Stuff that matters.

A comment on Hacker News CSRF Vulnerability.

Re:Hacker News CSRF Vulnerability by slavik81 on Thursday February 25, 2016 @05:22PM (#11178308)
Interesting. Is this why login is usually on its own page, rather than right on the main page? CSRF seems to limit your ability to cache any pages that contain forms.
[ Parent | on HN ]
Re:Hacker News CSRF Vulnerability by malka on Thursday February 25, 2016 @06:37PM (#11178750)
you could have an API that returns a CSRF token.
[ Parent | on HN ]