OWASP CSRF防御チートシートにツッコミをいれる

I'll be doing a YouTube live broadcast on November 4th from 7:00 PM. I'll be commenting on the OWASP CSRF Protection Cheat Sheet (Cross-Site Request Forgery Prevention Cheat Sheet). Cross-Site Request Forgery Prevention Cheat Sheet https://cheatsheetseries.owasp.org/ch... Reference: Translated by JPCERT/CC (Last revised: December 8, 2015) https://jpcertcc.github.io/OWASPdocum... XSS Vulnerabilities Can Circumvent CSRF Countermeasures - YouTube    • Video   Analyzing the Behavior of the XSS Worm "Samy" - Akaki I/O https://akaki.io/2018/analyzing_samy_... Problem: Criticizing the CSRF Prevention Cheat Sheet | Hiroshi Tokumaru's Diary https://blog.tokumaru.org/2018/11/csr... Answer: Commenting on the CSRF Prevention Cheat Sheet | Hiroshi Tokumaru's Diary https://blog.tokumaru.org/2018/11/csr... Laravel's CSRF Prevention Process: A Look at Actual Code - Qiita https://qiita.com/SanQ/items/e12083fc... PHP Conference Japan 2021: Introduction to SPA Security / Hiroshi Tokumaru - YouTube    • PHP Conference Japan 2021: SPAセキュリティ入門 / 徳丸 浩   Introduction to SPA Security ~ PHP Conference Japan 2021 - Slideshare https://www.slideshare.net/ockeghem/p... Thursday, November 4 7:00 PM Start time Ending time: 7:45 PM [PR] [Campaign] Web Security Basics (Tokumaru Basic Exam Certification)! Half Price! https://www.school.ctc-g.co.jp/campai... We welcome CTC Technology's offering of the "Web Security Basics (Tokumaru Basic Exam Certification)" course, for which we oversee the materials. "Web Security Basics (Tokumaru Basic Exam Certification)" is an ideal training course for learning the fundamentals of web security, and we have been involved in its planning from the beginning. We confidently recommend it to anyone starting their web security studies. I, Hiroshi Tokumaru, will be the instructor for this training course in November and February. We look forward to your participation. Hiroshi Tokumaru will be the instructor for the sessions on Tuesday, November 16, 2021, and Tuesday, February 8, 2022. ------------ ■EG Secure Solutions, Inc. 　https://www.eg-secure.co.jp/​ ■Seminar Information 　https://www.eg-secure.co.jp/seminar/​ ■For business inquiries, please click here 　https://www.eg-secure.co.jp/contact/​ ------------