New Cross-Site Request Forgery Attacks Can Give You Nightmares
gotowebsecurity.com