CSRF(Cross Site Request Forgery)

Users visit malicious websites and send the unintended request to other websites.

How to prevent

1. csrf token
2. origin or referral header
3. check about cookie samesite attr