http://qs1969.pair.com?node_id=607788


in reply to Re^3: Is your web application really secure? ("CSRF")
in thread Is your web application really secure? ("CSRF")

it all depends on how secure you want the application. if you're doing online-banking i think even you are glad that usually you have a timeout of 10 minutes and you can't let windows open and expect them to work an hour later =)