Security
CSRF in the age of SameSite cookies
Browsers now block many cross-site requests by default. That helps, but it doesn't make CSRF tokens obsolete.
Tag
#csrf
Every story tagged #csrf.
Tag
Every story tagged #csrf.
Browsers now block many cross-site requests by default. That helps, but it doesn't make CSRF tokens obsolete.