http://en.wikipedia.org/wiki/Cross-site_request_forgery Click to access Using_XSS_to_bypass_CSRF_protection.pdf
chrislee.kr – Personal blog as bookshelves
http://en.wikipedia.org/wiki/Cross-site_request_forgery Click to access Using_XSS_to_bypass_CSRF_protection.pdf