What is CSRF, and How to Prevent it?
CSRF attacks use a web application’s trust in a user’s browser. When a user logs into a web application, the application assumes that any requests sent by the user’s browser are valid. An attacker can gain control of this trust by tricking the user into visiting a malicious website that sends a CSRF request to the trusted application.