Fixed #22859 -- Improved crossDomain technique in CSRF example.

Thanks flisky for the report.