News for hackers. Stuff that matters.

A comment on #1 CSRF Is A Vulnerability In All Browsers. Parent comment

Re:#1 CSRF Is A Vulnerability In All Browsers by eurleif on Friday March 30, 2012 @06:16PM (#3778390)
You shouldn't be able to get the token from another domain, regardless of how long it lasts. How are you able to?
[ Parent | on HN ]
Re:#1 CSRF Is A Vulnerability In All Browsers by txt on Saturday March 31, 2012 @12:04AM (#3779303)
Im getting it on the same domain, but the request can be sent from any domain, as long as the user is logged in.
[ Parent | on HN ]