write-up(web)/dreamhack

[Dreamhack] CSRF Advanced write-up