Assertion: state changing request | /r/HasProperty | theft of data
Facets:
Source sentences:
text: CSRF attacks specifically target state-changing requests, not theft of data, since the attacker has no way to see the response to the forged request.