Re^2: Crash-Test Dummies: A Few Thoughts on Website Testing

[Your Mother]

"Tamper resistant" doesn't ring the same as "tamper proof" from the LinkIntegrity doc but I don't know the software. Relying on referring URIs, if that's what you meant by "one entry point," is completely insecure.

[Anonymous Monk]

it appears to be a nonce appended to links to prevent replay attacks and session riding... CSRF ... https://www.owasp.org/index.php/Session_Management#Page_and_Form_Tokens , Cryptographic nonce, Plack::Middleware::CSRFBlock

But stevieb appears to be a fan of sundialsvc4, so there is no way I'd ever consider using that module of his, bad company