News for hackers. Stuff that matters.

A comment on CSRF: Cross-Site Request Forgeries.

Re:CSRF: Cross-Site Request Forgeries by zeroonetwothree on Thursday July 19, 2012 @01:39PM (#4267128)
One thing that's not covered by a lot of frameworks is protecting against CSRF in AJAX requests. Django has some info on enabling this (https://docs.djangoproject.com/en/dev/ref/contrib/csrf/#ajax), but it's easy to overlook.
[ Parent | on HN ]
Re:CSRF: Cross-Site Request Forgeries by jamessocol on Thursday July 19, 2012 @03:30PM (#4267665)
Honestly, "easy to overlook" is why I wrote a checklist for basics. CYA, then get to the advanced stuff.
[ Parent | on HN ]