CSRF, how to solve it

CSRF: Baidu Encyclopedia. For example, Bob, a website user, may be browsing a chat forum, and Alice, another user, is also in the forum. the latter has just published an image message with a bank link of Bob. Imagine CSRF
Baidu Encyclopedia
Http://baike.baidu.com/view/1609487.htm


Attacks work by adding links or scripts to pages authorized to users. For example, Bob, a website user, may be browsing a chat forum, and Alice, another user, is also in the forum. the latter has just published an image message with a bank link of Bob. Assume that Alice has compiled a form submission link on Bob's bank site, and uses this link as an image tag. If Bob's bank saves his authorization information in the cookie and the cookie does not expire, Bob will submit the withdrawal form and his cookie when trying to load the image, in this way, the transaction is authorized without Bob's consent.

What does red mark mean?

Can I write it out with a simple html structure?

For example
The above will not send a request to www.xxx.com


------ Solution --------------------
Come in and learn
------ Solution --------------------
Wrong. the link is directly written into src. of course, this link must be clever.

In addition, the bank must accept the get method --> Isn't that silly now?
Other websites may

If you want to use the post method, you need to do some actions, such as clicking
But in general, this is not feasible, especially for banks.

------ Solution --------------------
If you don't know what this article is about, you may doubt that someone else is wrong.
Although few get submissions are made now, the possibility of such submissions still exists.
What's more, there are post statements below.
------ Solution --------------------
It's boring for banks. The bank now has a payment password. The passed parameters also contain keys. Html tags are converted. Otherwise, javascript input is even worse.