Cross-Site Post Requests Without a Content-Type Header – CSRF Attack
nastystereo.com