As far as I can tell that particular vulnerability isn&#x27;t a CSRF at all, it&#x27;s an insecure JSONP endpoint[1]. The original author is mistaken.<p>[1] <a href="http:&#x2F;&#x2F;homakov.blogspot.com&#x2F;2013&#x2F;02&#x2F;are-you-sure-you-use-jsonp-properly.html" rel="nofollow">http:&#x2F;&#x2F;homakov.blogspot.com&#x2F;2013&#x2F;02&#x2F;are-you-sure-you-use-jso...</a>