Comment Re:Does this actually say anything? (Score 1) 143
XSS is done on the target site.
CSRF is done on a different site.
"Love is an ideal thing, marriage a real thing; a confusion of the real with the ideal never goes unpunished." -- Goethe