obra’s Twitter Archive—№ 3,321

Browsers treat developers like children. True client-side apps in HTML5 are going to require a serious rethink of CSRF "protections"