coates’s Twitter Archive—№ 18,000

It astounds me that after all these years, web people who claim to know what they’re doing often still don’t do CSRF protection properly.