1 Facebook CSRF leading to full account takeover (fixed) 2013222 points51 commentsSecurity & Privacy details