2 month ago
deusx : csrf_protect.php - "This class adds CSRF protection to existing PHP applications that make use of PHP's session support for authentication. If you are writing an application from scratch you shouldn't use this; it's designed to protect legacy apps that w
Simon Willison : csrf_protect.php - csrf_protect.php. A PHP class for applying CSRF protection to existing PHP applications, using output buffering to rewrite any POST forms on a page. Heavily inspired by Django’s CSRF middleware. Tell me if you spot any bugs!
# copy
11 month ago
nelson : XSRF attacks - The most common vulnerability in webapps today. Apparently Gmail was vulnerable.
# copy
18 month ago
wearehugh : Insecurity is Ruby on Rails Best Practice | ianloic.com
# copy
