P portswigger.net Bittersweet Symfony: Devs accidentally turn off CSRF protection in PHP framework 78 points feross 4 years ago 55 comments