Re^2: Crash-Test Dummies: A Few Thoughts on Website Testing

"Tamper resistant" doesn't ring the same as "tamper proof" from the LinkIntegrity doc but I don't know the software. Relying on referring URIs, if that's what you meant by "one entry point," is completely insecure.

Comment on Re^2: Crash-Test Dummies: A Few Thoughts on Website Testing

Replies are listed 'Best First'.
Re^3: Crash-Test Dummies: A Few Thoughts on Website Testing by Anonymous Monk on Oct 12, 2015 at 23:53 UTC
it appears to be a nonce appended to links to prevent replay attacks and session riding... CSRF ... https://www.owasp.org/index.php/Session_Management#Page_and_Form_Tokens , Cryptographic nonce, Plack::Middleware::CSRFBlock But stevieb appears to be a fan of sundialsvc4, so there is no way I'd ever consider using that module of his, bad company	[reply]