<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>CSRF Demo</title>
</head>
<body>
<form method="POST">
<input type="hidden" name="csrf-token" value="CSRF_TOKEN">
<button type="submit">
<p>CSRF protected form</p>
</button>
</form>
<form method="POST">
<button type="submit">
<p>CSRF un-protected form</p>
</button>
</form>
</body>
</html>