BKcore/NoCSRF — pull request #1 by jas- (2011-12-27 14:23:41+00:00)
Title: Possible additions...

I went ahead and forked your NoCSRF project in order contribute additional attack vectors that are (IMHO) crucial to preventing CSRF.

The two additional components of the token are a hashed value of the remote address as well as a hashed value of the browser agent.

Both get validated in the same manner as the time stamping already implemented and I tried to keep the code as similar to yours as possible.

Hope it helps.