Feasible Client-Side CSRF Token Brute Force Attack Revealed

Feasible Client-Side CSRF Token Brute Force Attack Revealed

Uses three-year-old CSS-based history hack to extract tokens