CSRF
In plain terms
An attack tricking a user's browser into unwanted actions.
Going deeper
Cross-Site Request Forgery makes an authenticated user's browser send forged requests to a site they're logged into, performing actions without consent. It abuses existing sessions.
Under the hood
Defended with anti-CSRF tokens, SameSite cookies, and checking origins.
Examples
Forged form submissions, CSRF tokens, SameSite cookies, session abuse.
Think of it like...
Like forging someone's signature on a form using their already-open account.