B blog.miguelgrinberg.com CSRF protection without tokens or hidden form fields 303 points adevilinyc 10 months ago 112 comments
