Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You could do the same with a POST by just running the following in a hidden iframe on your site:

  <form id="form" method="post" action="https://accounts.google.com/Logout"></form>
  <script>$('#form').submit()</script>
The correct way of dealing with this issue is to rely on CSRF tokens.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: