The browser's same-origin policy does not prevent CSRF attacks because the attack requests are transmitted to the same origin in proxy for the intruding third-party site.

浏览器的同源策略无法阻止CSRF攻击，因为攻击请求被传输到第三方入侵站点的代理中相同的源。

youdao

During a CSRF attack, requests originate from an intruding third-party site and are passed through an authenticated browser page to the server.

在一个CSRF攻击过程中，请求源自一个入侵的第三方站点并通过一个已验证的浏览器页面传递到服务器。

youdao

As mentioned above, a replay attack by some malicious third party is the most convenient attack.

正如上文所提到的，来自某个恶意第三方的再现攻击是最容易遭受到的攻击。

youdao

Saturday's attack on the military headquarters is the third major terrorist strike in Pakistan in the past week.

VOA: standard.2009.10.11

It was the third attack on the Serb side of the divided town in 24 hours.

BBC: Kosovo violence: Children injured in Mitrovica blast

It is the third attack on the church in the last month.

BBC: NEWS | UK | Northern Ireland | Church attack 'linked to parade'

It is the third violent attack in two weeks believed to be motivated by anti-gay bias, police said.

CNN: New York slaying considered hate crime