Confirm
81
edits
Changes
m
→Preventing CSRF: clarified session tying
* Characteristics of a CSRF Token
** Unique per user & per user session
** Tied to the a single user session
** Large random value
** Generated by a cryptographically secure random number generator
