Protect your reset password tokens: UK Data Protection position on referers (iconewsblog.wordpress.com) 1 points by fastmark 10y ago ↗ HN
[–] fastmark 10y ago ↗ If you wish to use Reset Password tokens, then be sure to block referers and/or not include any third party loaded assets (JavaScript, css, etc).It's not just reset password tokens: beware any protected data, like PII (emails, etc)!
1 comment
[ 2.6 ms ] story [ 14.8 ms ] threadIt's not just reset password tokens: beware any protected data, like PII (emails, etc)!