fazalmajid / temboz

The Temboz RSS/Atom feed reader
MIT License
81 stars 4 forks source link

reinforce Temboz against CSRF #88

Open fazalmajid opened 11 years ago

fazalmajid commented 11 years ago

An attacker who can guess the Temboz URL can attempt attacks against it using cross-domain request forgery (CSRF). We need to defend Temboz against such attacks, e.g. using a nonce in the URL.