{"action":"created","issue":{"url":"https://api.github.com/repos/ierg4210/shop10/issues/1","labels_url":"https://api.github.com/repos/ierg4210/shop10/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/ierg4210/shop10/issues/1/comments","events_url":"https://api.github.com/repos/ierg4210/shop10/issues/1/events","html_url":"https://github.com/ierg4210/shop10/issues/1","id":73648747,"number":1,"title":"Csrf LoginPage","user":{"login":"Milanvdm","id":5628925,"avatar_url":"https://avatars.githubusercontent.com/u/5628925?v=3","gravatar_id":"","url":"https://api.github.com/users/Milanvdm","html_url":"https://github.com/Milanvdm","followers_url":"https://api.github.com/users/Milanvdm/followers","following_url":"https://api.github.com/users/Milanvdm/following{/other_user}","gists_url":"https://api.github.com/users/Milanvdm/gists{/gist_id}","starred_url":"https://api.github.com/users/Milanvdm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Milanvdm/subscriptions","organizations_url":"https://api.github.com/users/Milanvdm/orgs","repos_url":"https://api.github.com/users/Milanvdm/repos","events_url":"https://api.github.com/users/Milanvdm/events{/privacy}","received_events_url":"https://api.github.com/users/Milanvdm/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-05-06T15:00:38Z","updated_at":"2015-05-06T17:51:38Z","closed_at":"2015-05-06T17:51:38Z","body":"Your csrf value has a static value so it won't be secure."},"comment":{"url":"https://api.github.com/repos/ierg4210/shop10/issues/comments/99551782","html_url":"https://github.com/ierg4210/shop10/issues/1#issuecomment-99551782","issue_url":"https://api.github.com/repos/ierg4210/shop10/issues/1","id":99551782,"user":{"login":"allenpoon","id":3294681,"avatar_url":"https://avatars.githubusercontent.com/u/3294681?v=3","gravatar_id":"","url":"https://api.github.com/users/allenpoon","html_url":"https://github.com/allenpoon","followers_url":"https://api.github.com/users/allenpoon/followers","following_url":"https://api.github.com/users/allenpoon/following{/other_user}","gists_url":"https://api.github.com/users/allenpoon/gists{/gist_id}","starred_url":"https://api.github.com/users/allenpoon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/allenpoon/subscriptions","organizations_url":"https://api.github.com/users/allenpoon/orgs","repos_url":"https://api.github.com/users/allenpoon/repos","events_url":"https://api.github.com/users/allenpoon/events{/privacy}","received_events_url":"https://api.github.com/users/allenpoon/received_events","type":"User","site_admin":false},"created_at":"2015-05-06T17:51:38Z","updated_at":"2015-05-06T17:51:38Z","body":"My CSRF value is per session, each session generate a new CSRF value.\r\nBy CSRF defination, CSRF value is used to defense a Cross origin who cannot get my CSRF value based on same origin policy\r\nThe protection is enough\r\nfor your reference: please see \r\nLecture Note \"08-lecture-WebAppSecurityI\" Page 16\r\n4. Submitting a ....\r\n - Implementations\r\nNonce can be a session id itself or a random and user-specific string / number\r\nso CSRF value can be static for each session"}}