CSRF An attack where a malicious website makes an HTTP request to a target website in such a way that the website thinks that the request is part of a legitimate user's session