Comment Comment by d4n3 I think modern browsers prevent cross-requests to local subnets so this may mitigate CSRF parent d4n3 11 years ago