https://ml1710bestcheapprice.blogspot.com/2024/03/csrf-attack-with-form-get-and-iframe.html