https://4pooltable.blogspot.com/2024/01/csrf-attack-with-form-get-and-iframe.html