Protection from cross-site request forgery attacks beaten

[nsane.forums]

Security tokens in URLs are meant to provide protection against Cross-Site Request Forgery attacks. A security specialist has now shown how it's possible to use a three-year old method for reading the browser history to 'calculate' these tokens

View: Original Article