Comment Re:Does this actually say anything? (Score 1) 143
XSS is done on the target site.
CSRF is done on a different site.
Almost anything derogatory you could say about today's software design would be accurate. -- K.E. Iverson