Web security-CSRF attack

1. CSRF
   CSRF (Cross-Site Request Forgery) cross-site request forgery mainly uses the unexpired cookie information on the browser side to forge the identity and pass the server's identity verification.
2. Defense
   (1) Verify the HTTP Referer field
   (2) Add the token to the request address and verify
   (3) Customize the attributes in the HTTP header and verify

CSRF attack and defense