The Truth Behind Invalid CSRF No More Confusion Overnight, “invalid CSRF” has gone from backend jargon to cultural footnote lots of people