CSRF (cross-site request forgery)

Also written: cross-site request forgery

An attack in which another site's form makes the customer's browser send a request, such as an order, with their cookie. The SameSite flag stops it.

Where the book teaches it