Comment Re:Does this actually say anything? (Score 1) 143
XSS is done on the target site.
CSRF is done on a different site.
Just about every computer on the market today runs Unix, except the Mac (and nobody cares about it). -- Bill Joy 6/21/85