https://seanacnet.com/website-related/what-is-csrf-explained/
探討CSRF:什麼是跨站請求偽造攻擊?