Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
5
Impact
~2k people reached

  • 0 posts edited
  • 0 helpful flags
  • 1 vote cast
Aug
6
awarded  Nice Question
Jan
13
awarded  Popular Question
Dec
18
awarded  Scholar
Dec
18
awarded  Supporter
Dec
18
accepted Is Django's built-in CSRF protection enough?
Dec
17
awarded  Student
Dec
17
comment Is Django's built-in CSRF protection enough?
I'm not sure it's something new. It looks like they're implementing a Session-Independant Nonce (cf page 5 seclab.stanford.edu/websec/csrf/csrf.pdf) in which case that is a known security flaw of this implementation.
Dec
17
asked Is Django's built-in CSRF protection enough?