Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Also security scanning software is apparently looking for CSRF tokens on forms.

Ive seen these two mentioned.

Conclusion

Based on the above, I think it is most important that Magnolia is percieved well and adheres to the established best practices. While our referal protection is good, it is not generally accepted and therefore will be mistrusted in many secuirty audits. In brief - many customers and potential customers will trust the OWASP page more that they will trust our reassurances that our system is secure.