CSRF

*DVWA使用

http://www.219.me/posts/category/security/%E6%94%BB%E9%98%B2%E5%AE%9E%E9%AA%8C%E5%AE%A4/dvwa

http://www.219.me/posts/category/security/%E6%94%BB%E9%98%B2%E5%AE%9E%E9%AA%8C%E5%AE%A4/dvwa/page/2 

*基于DVWA

http://www.myhack58.com/Article/html/3/8/2016/70778.htm

http://www.219.me/posts/2431.html

*CSRF与XSS的区别

http://selfcontroller.iteye.com/blog/1844653

http://www.cnblogs.com/wangyuyu/p/3388180.html