News for hackers. Stuff that matters.

A comment on Security advisory: Breach and Django. Parent comment

Re:Security advisory: Breach and Django by homakov on Tuesday August 06, 2013 @11:35AM (#6167140)
XSS? unrelated here I think.

Exactly, cookie forcing/tossing = "set" their CSRF token

[ Parent | on HN ]

There are no comments on this comment yet.