What is CSRF (cross-site request forgery)?

A trick where another website makes a signed-in user's browser send an unwanted request to your app. Frameworks and cookie settings protect against it.