Bittersweet Symfony: Devs accidentally turn off CSRF protection in PHP frameworkportswigger.net78 pointsfeross4 years ago