Interesting CSRF bypass (POST-GET) | Hacker News Reader