HN
Hacker News
Top
New
Best
Ask
Show
Jobs
Comment by mcs | Hacker News Reader
Parent
Full thread
mcs
·
I wonder how many other sites put in CSRF tokens but don't validate.
View on HN
mike-cardwell
·
For every one of these websites, there are probably 10,000 that don't do any CSRF checking at all.
Reply on news.ycombinator.com