diff --git a/fix.md b/fix.md
new file mode 100644
index 00000000..8a3bf565
--- /dev/null
+++ b/fix.md
@@ -0,0 +1,3 @@
+# Fix for #843
+
+[REVIEW] owasp-top-10-web: make CSRF and SameSite checks credential-aware