senchalabs/connect — Issue #465: New CSRF token for every request
Author: juriejan
Created: 2012-01-24 08:57:15+00:00
State: open

Wouldn't it be better if CSRF token changed for every request?

Seems a little flimsy to have the same token for an entire session.