Performing a cross-site request forgery attack