Maintainer of OpenCart dismisses csrf vulnerability as a user problem. | Hacker News Reader