Web Security - MacKittipat/note-developer GitHub Wiki CSRF Cross site request forgery Always send CSRF token to server https://www.youtube.com/watch?v=eWEgUcHPle0 XSS Cross-site scripting