The description of the "XSRF protection" report section has a small typo
"forgety" instead of forgery.
===========================================
POST query with no XSRF protection [toggle]
Parameter-accepting POST requests that lack security tokens. Some
POST requests change application state, and may be vulnerable to cross-site
request forgety attacks.
===========================================
Thanks for a great tool.
Original issue reported on code.google.com by Christop...@gmail.com on 2 Jul 2008 at 7:23
Original issue reported on code.google.com by
Christop...@gmail.com
on 2 Jul 2008 at 7:23