Working on older projects (as i tend to do), I often get various requirements for security enhancements. A few days ago, somebody apparently ordered a security test of a site I was working on, so yesterday i got the report:3 HIGH security errors, one being that we had no CSRF tokens on the forms. gah… […]