P pyx.io Facebook CSRF leading to full account takeover (fixed) 222 points franjkovic 13 years ago 51 comments