Links

• XSS
• CSRF
• https://www.quora.com/What-is-the-difference-between-XSS-and-CSRF-from-their-execution-perspective
• Web apps are impossible to secure