News for hackers. Stuff that matters.

A comment on Gmail XSRF?.

Re:Gmail XSRF? by gregschlom on Saturday April 09, 2011 @02:39PM (#2427767)
Sorry, but I call that a feature, not a vulnerability.
[ Parent | on HN ]
Re:Gmail XSRF? by jnhnum1 on Saturday April 09, 2011 @02:44PM (#2427787)
Including that tag on any page - forum, blog, whatever, will log you out without your consent. For comparison, Facebook has cross-site request forgery protection for logging out
[ Parent | on HN ]