CSRF

1.CSRF (XSRF, Cross-Site Request Forgery)

post-thumbnail