If you cache the page from which a user submits a POST/PUT/DELETE, how are they ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

jbri on Feb 11, 2011 | parent | context | favorite | on: Flash + 307 redirect = Game Over

If you cache the page from which a user submits a POST/PUT/DELETE, how are they going to get their CSRF token?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact