Cross-site Request Forgery (CSRF) Attack Demo

The slides themselves are creative commons licensed CC-BY-SA, and images used are licensed as individually attributed.

[moosegoose]

instead of csrf tokens, will having user enter current password on these forms safe?

[gavriel_adi]

Wow, just a question, who uses a GET request nowadays to change passwords haha, are you stoned or what???