News for hackers. Stuff that matters.

A comment on GitHub's post-CSP journey. Parent comment

Re:GitHub's post-CSP journey by steffenweber on Friday January 20, 2017 @07:27AM (#13443293)
The conclusion of this discussion seems to be that "SameSite" cookies should be used to help preventing CSRF.

https://www.igvita.com/2016/08/26/stop-cross-site-timing-att...

[ Parent | on HN ]

There are no comments on this comment yet.