3 ms·Isn't that CSRF, though?by qu4z-2 12y agoIsn't that CSRF, though?smsm42 12y agoCSRF is what allows you to post. XSS is what happens after it is posted.