Talk on CSRF I gave at work that talks about CSRF, how to prevent it and how frameworks can make prevention nearly automatic.

2. Rasmus Lerdorf “ The Web is broken and it's all your fault.”

3. “ There is no metric for compliance with a 'culture', and a 'culture of security' is overridden by a culture of 'get the job done' every time.” Jon Espenschied

6. “ Same Origin” Policy document, cookies bank.com blog.net XHR XHR TAG TAG JS

9. Trivial CSRF Exploit

10. Exploiting Otherwise Secure Networks

14. Enterprise CSRF Mitigation

15. Questions?