Re:CSRF is really dead
by tylerl on Sunday September 08, 2019 @02:18AM
(#20908915)
This isn't Chrome going against the spec. This is the spec's author (who happens to work on Chrome) changing the spec.
Since the spec is still in draft, changes are expected. This isn't even the first change, we're already on version 3. And this version expires next month, so we're literally, explicitly, due for a new revision.
Since the spec is still in draft, changes are expected. This isn't even the first change, we're already on version 3. And this version expires next month, so we're literally, explicitly, due for a new revision.