CSRF

Also written: cross-site request forgery

Cross-site request forgery: an attack where another website makes your browser send a request, carrying your login cookie, to a site you're logged into. Protection against it can be turned off for an API that uses no cookies, because clients send their credentials with every request and there is nothing to forge.