coates’s avatarcoates’s Twitter Archive—№ 2,089

  1. <input id="authenticity_token" name="authenticity_token" type="hidden" value="{hashgoeshere}" /> = NOT CSRF