forgery

Also written: request forgery

An attack that makes a trusted party, a user's browser or the server itself, send a request the attacker wrote, so the request looks genuine.

Where the book teaches it