Friends Don’t Let Friends Mix XSS and CSRF

Posted on February 16, 2014