security stuff for colin

Open Web Application Security Project

top exploits:

cross site request forgery (csrf)

i don't think this is in the owasp top 10 anymore but it is on the 2013 list
a deep dive into csrf protection in rails