Aaron Bishop
An introduction to Cross Site Request Forgery, why it is an issue and why you shouldn't assume your framework is protecting you.