https://justice-reaper.github.io/posts/Clickjacking-Lab-1/
Basic clickjacking with CSRF token protection - Justice-Reaper