News for hackers. Stuff that matters.

A comment on CSRF is really dead. Parent comment

Re:CSRF is really dead by EGreg on Saturday September 07, 2019 @10:38PM (#20908255)
What is the point of sending cookies to cross-site domains? I never got this. We have postMessage today, and iframes. We have API client information. Third party cookies are restricted anyway, now.
[ Parent | on HN ]

There are no comments on this comment yet.