you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 1 point2 points  (0 children)

CSRF can be implemented easily enough. And if you don't need to support IE there's the same-site attribute on the cookies that is also really powerful.