//developer.mozilla.org/en-US/docs/Learn/Server-side/Firststeps/Website_security#Cross_Site_Request_Forgery
有关更多预防提示,请参阅OWASPCSRF预防备忘单(https://www.owasp.org/index.php/Cross-SiteRequest_Forgery(CSRF%29_Prevention_Cheat_Sheet