What are common ways to perform a CSRF attack?
The most popular ways to execute CSRF attacks is by using a HTML image tag, or JavaScript image object. Typically an attacker will embed these into an email or website so when the user loads the page or email, they perform a web request to any URL of the attackers liking. Below is a list of the common ways that an attacker may try sending a request. HTML Methods IMG SRC SCRIPT SRC 'XMLHTTP' Object (See "Can applications using only POST be vulnerable?" for when this can be used) IE
