This is an excellent concise introduction to Cross-Site Request Fogeries, including some scary examples of real sites that until recently had such vulnerabilities, and recommended mitigations.

No Comments »