By default the form post CSRF protection in Rails creates an authenticity token for a user that only changes when the user's session changes. One of our customers did a security audit of our site and flagged that as an issue.By default the form post CSRF protection in Rai
阅读背景：
Rails默认的CSRF保护是不安全的吗？
来源：互联网
分享到：
