News for hackers. Stuff that matters.

A comment on Why do we have both CSRF protection and CORS?.

Re:Why do we have both CSRF protection and CORS? by smagin on Monday March 03, 2025 @02:00PM (#43245385)
I asked that in the post but nobody answered still, let's try here.

Why are CSRF tokens rotated? OWASP says it's somehow more secure but I don't really see why.

[ Parent | on HN ]

There are no comments on this comment yet.