What is the Cross-Site Request Forgery (CSRF) Attack

Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery is an attack that forces an end user to execute the unwanted action in the web application which there currently authenticated. (more CSRF)

Must watch
Ex -:http://www.baeldung.com/spring-security-csrf

And
https://stackoverflow.com/questions/5207160/what-is-a-csrf-token-what-is-its-importance-and-how-does-it-work

1 2 3 4 5

<form action="http://bank.com/transfer" method="POST">     <input type="hidden" name="accountNo" value="5678"/>     <input type="hidden" name="amount" value="1000"/>     <input type="submit" value="Show Kittens Pictures"/> </form>