Posts on Security 2012 Open-sourcing production code Aug 18 2012 2010 Form protection revisited Jul 03 2010 Don't forget me, cookie! Jun 12 2010 No-nonsense protection using a nonce Jun 06 2010