Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
FiloSottile
8 months ago
|
parent
|
context
|
favorite
| on:
CSRF protection without tokens or hidden form fiel...
It's why I like Sec-Fetch-Site: the #1 risk is for the developer to make a mistake trying to configure something more complex. Sec-Fetch-Site delegates the complexity to the browser.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
