How does Stack Overflow's markdown protect against CSRF attacks? For example, an image generated by markdown like:
![alt text] : http://stackoverflow.com/users/logout
does not log the user off when viewed
migrated from stackoverflow.com Jul 15 '10 at 1:18
This question came from our site for professional and enthusiast programmers.
Have you tried following the link? Brings you to a page where you have to click buttons (which generates POST requests) to actually log out.
You cannot generate POST requests from