title: Example of silently submitting a POST FORM (CSRF)
body: <p>I'm interested in knowing how it is possible to silently submit a POST form for CSRF, without the user having any notice (the document location being redirected to the POSTed URL is not silent).</p>
  
  <p>Example:</p>
  
  <pre><code>&lt;form method='POST' action='http://vulnerablesite.com/form.php'&gt;
  &lt;input type='hidden' name='criticaltoggle' value='true'
  &lt;input type='submit' value='submit'&gt;
  &lt;/form&gt;
  </code></pre>
  
  <p>On an external site, what would I need to do to trigger this form automatically and silently?</p>