HN Explorer

dagobah

↗ HN profile [ 21.5 ms ] full profile
Karma
2
Created
November 13, 2017 (8y ago)
Submissions
0
  1. Can “Cookie to header token” CSRF prevention be beaten with permissive CORS?

    The CSRF Wikipedia article https://en.wikipedia.org/wiki/Cross-site_request_forgery#Cookie-to-header_token describes Cookie-to-header_token as sending a CSRF token to users in a cookie, and then using JavaScript to read…

    4 points 4