Cross-Site Post Requests Without a Content-Type Header – CSRF Attack | Dark Hacker News