3 comments

[ 4.5 ms ] story [ 17.2 ms ] thread
So...CSRF tokens for everything?
a white-list solution would be a better approach for such thing