Csrf is dead.

[Lotd]

This post covers the sameSite cookie attribute that's touted to be the killer of csrf attacks.

https://scotthelme.co.uk/csrf-is-dead/

 

[Kaev]

I'm not a web developer but that's still good to know. Thanks for sharing!