Ep. 115: Is CSRF Really Dead?

DevelopSec: Developing Security Awareness by Jardine Software Inc.

Nov 6, 201915:09Technology

In 2020, Chrome will default the SameSite attribute to Lax on all cookies. SameSite helps mitigate CSRF, but does that mean CSRF is Dead? For more info go to or

Related Episodes

Continue listening to more episodes from DevelopSec: Developing Security Awareness.

Ep. 129: When Security Recommendations Miss The Point

Jan 30, 2026 - 18:39

Ever read a security advisory that told you to “use a VPN” to protect a Bluetooth device? In this episode...

Ep. 128: OWASP Top 10 2025

Jan 21, 2026 - 30:50

In this episode James gives an overview of the new OWASP Top 10 2025. He shares some insights into the hi...

Ep. 127: Importance of Terminology

Jan 14, 2026 - 13:22

In this episode, James talks about the difference between end-to-end encryption and the standard encrypti...

Ep. 126: Avoiding Panic and Misunderstandings with Proper Authentication Failure Reporting

Jan 6, 2026 - 16:28

Have you ever felt that feeling of thinking your account has been compromised? It can be a scary feeling....

Ep. 125: From Flat Tires to AppSec: The Power of Tools and Process

Dec 31, 2025 - 21:07

In this episode, James shares a story about fixing a flat tire on an E-Scooter and how it relates to secu...

Ep. 124: Double-ClickJacking

Feb 24, 2025 - 21:07

In this episode, I go over what Double-ClickJacking is and what you can potentially do about it to reduce...

Ep. 123: Goals of Security Culture - Sort of?

Feb 18, 2025 - 7:56

In this episode, I talk about how security is a part of everyone's role and the labeling of "Securit...

Ep. 122: Integrating Security Responsibilities into Development

Feb 10, 2025 - 18:04

In this episode I talk about assigning responsibility for secure development and how the dev and security...