this. This is in stark contrast to the results found by web
application security experts including Jeremiah Grossman,
RSnake, Andrew van der Stock, and Jeff Williams. These
researchers regularly find CSRF during contract work, noting