websecurity@lists.webappsec.org

The Web Security Mailing List

View all threads

CSRF protection: What are the benefits of using the Synchronizer Token Pattern if your application is not vulnerable to XSS and using HTTPS only?