Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Stealing passwords from McDonald's users. Parent comment
This is why we have CSRF tokens, right? Orthogonal to session cookies, but when used together they avoid this vuln.
There are no comments on this comment yet.
This is why we have CSRF tokens, right? Orthogonal to session cookies, but when used together they avoid this vuln.