csrf.html



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8">
        <title>Change Password</title>
        <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css">
    </head>
    <body class="container">
        <br>
        <div class="card">
            <h5 class="card-header">
                Change Password
                <a class="btn btn-primary float-right" href="/CSRF/logout">Logout</a>
            </h5>
            <div class="card-body">
                <h5 class="card-title"></h5>
                <form action="http://localhost:8888/CSRF/insecure" method="post">
                    <div class="form-group">
                        <label>New password</label>
                        <input type="password" class="form-control" name="newPwd">	    
                    </div>
                    <div class="form-group">
                        <label>Confirm password</label>
                        <input type="password" class="form-control" name="conPwd">	    
                    </div>                    
                    <button type="submit" class="btn btn-primary">Submit</button>
                </form>
            </div>
        </div>
        <script src="https://code.jquery.com/jquery-3.3.1.slim.min.js"></script>
        <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js" ></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js"></script>
    </body>
</html>