Cross-Site Request Forgery

https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html

https://owasp.org/www-community/attacks/csrf

Mitigating CSRF attacks in Single Page Applications - https://medium.com/tresorit-engineering/modern-csrf-mitigation-in-single-page-applications-695bcb538eec

https://developer.mozilla.org/en-US/docs/Glossary/CSRF

XSS always overrides CSRF - if you're vulnerable to the former then any CSRF protection is undermined. source