CSRF

CSRF is an attack in which a foreign site tricks a logged-in user's browser into making unwanted requests. Forms protect themselves with a secret token per session. Pages containing such tokens should therefore not be cached jointly for all visitors.