News for hackers. Stuff that matters.

A comment on Security advisory: Breach and Django. Parent comment

Re:Security advisory: Breach and Django by homakov on Tuesday August 06, 2013 @12:18PM (#6167448)
The parent said "as well" but I'm still insisting it referrer must not be neither a whole nor a part of CSRF protection.
[ Parent | on HN ]
Re:Security advisory: Breach and Django by tptacek on Tuesday August 06, 2013 @12:31PM (#6167538)
Sorry, I meant the specific domain you mentioned. :)
[ Parent | on HN ]