CSRF: Cross-Site Request Forgeries

Re:CSRF: Cross-Site Request Forgeries by languagehacker on Thursday July 19, 2012 @01:54PM (#4267216)

This is a decent article, but it's really just another "use your framework to mitigate CSRF" article. There's probably been hundreds of them in the last five years. Useful for junior devs who haven't seen it before; uninteresting for most everyone else.

[ Parent | on HN ]

Re:CSRF: Cross-Site Request Forgeries by chao- on Thursday July 19, 2012 @11:12PM (#4269194)

Speaking as someone who is still, arguably, a "junior dev", and who started reading Hacker News as a far-more-junior dev, getting these topics on your radar has to happen somehow. I've learned about many topics' existence by simply bumping into articles like this, and checking the comments to learn more.

I do agree the article is little more than introductory, but rather than complain, let's provide some more in-depth links for those who want to learn:

http://www.slideshare.net/guestdb261a/csrfrsa2008jeremiahgro...

http://appsandsecurity.blogspot.com/2012/01/stateless-csrf-p...

[ Parent | on HN ]

Re:CSRF: Cross-Site Request Forgeries by jamessocol on Thursday July 19, 2012 @03:29PM (#4267661)

We keep making more junior devs. It's important to drown out the w3schools and bad practices with good practices, so when they look up how to do it, they learn the right way.

[ Parent | on HN ]