[web2py] Re: Rails vulnerability issue (are we protected?)

[Massimo Di Pierro]

I need to understand better Rails mechanism to understand what broke
there. We do not use http headers to protect against CSRF, we use a
one time uuid hidden in the forms.