CSRF using method other than get or post

coldwaterq / want2hack

GNU General Public License v2.0

3 stars 0 forks source link

CSRF using method other than get or post #47

Closed coldwaterq closed 10 years ago

coldwaterq commented 10 years ago

Many places check method get, and if it is not get it assumes it is post. CSRF only is applied on POST requests so all assumed post requests need to be checked to make sure they are post requests.