Mark Goodwin
Web Security Engineer
Contact:
mgoodwin at mozilla dot com
irc: mgoodwin
Stuff:
SameDomain
- Preventing CSRF with a cookie attribute (formerly OriginOnly)