#xss

XSS and CSRF Are Different Problems: A Browser Security Guide for Students

XSS is about attacker-controlled script executing in a trusted origin; CSRF is about a browser being tricked into sending an authenticated request.