CSRF attacks are more dangerous, less popular (which means fewer resources for developers), and more difficult to defend against than XSS attacks.

• CSRF攻击更加危险，更加不常见（也意味着对开发着可用的资源更少），和XSS攻击比起来也更加难以防范。