Confirm
81
edits
Changes
added requirement to CSRF protection to ensure tokens are tied to the session
* Characteristics of a CSRF Token
** Unique per user & per user session
** Tied to the session
** Large random value
** Generated by a cryptographically secure random number generator
