A8 – Cross Site Request Forgery (CSRF)