CSRF怎么记

You can prevent this type of CSRF attack if the server at mybank avoids the use of HTTP GET requests to initiate changes and, instead, uses only POST requests to initiate changes.

如果mybank的服务器避免使用HTTP GET请求来发起更改，而是只使用POST来发起更改，那么您可以阻止这种类型的DSRF攻击。

In addition to handling traditional threats, a mashup application or web page must address such issues as cross-site scripting ( XSS) and cross-site request forgery ( CSRF), among others.

除了处理传统威胁外，混搭应用程序或web页面必须解决跨站点脚本编写（XSS）和跨站点请求伪造（CSRF）等问题。

The browser's same-origin policy does not prevent CSRF attacks because the attack requests are transmitted to the same origin in proxy for the intruding third-party site.

浏览器的同源策略无法阻止CSRF攻击，因为攻击请求被传输到第三方入侵站点的代理中相同的源。