News for hackers. Stuff that matters.

A comment on Hacker News CSRF Vulnerability. Parent comment

Re:Hacker News CSRF Vulnerability by kogir on Thursday February 25, 2016 @07:51PM (#11179125)
What stops an attacker from requesting the CSRF token?
[ Parent | on HN ]
Re:Hacker News CSRF Vulnerability by r1ch on Thursday February 25, 2016 @08:10PM (#11179204)
Same-origin policy.
[ Parent | on HN ]
Re:Hacker News CSRF Vulnerability by kogir on Thursday February 25, 2016 @08:52PM (#11179350)
That only applies to browsers. I can request it from my server just fine. See https://news.ycombinator.com/item?id=11178922
[ Parent | on HN ]