Revising netflix's CSRF
Dave Ferguson writes
"Back in 2006, I put out some findings about CSRF on Netflix's web site. I thought people might be interested to know that I revisited the issue recently and was shocked to find Netflix
still hasn't fixed all their CSRF issues, at least when it comes to movie queues. You can read more about it here:
http://appsecnotes.blogspot.com/2009/01/netflix-csrf-revisited.html"
Certainly it's easy to fix, I bet NFlix left it in for a business reason - some service probably depends on it.
Posted by: Jim Manico | Feb 11, 2009 12:07:58 PM