Security News > 2016 > February > quot;Breaking CSRF: ASP.NET MVCquot; (Appsec Streetfighter Blog)