Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

<img src="https://accounts.google.com/Logout" style="display:none">

"X-Frame-Options" is used to defend against click-jacking attacks, not to defend against CSRF.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: