This post by Peachey88 was moved on 2010-12-31. You can find it at Thread:User talk:Peachey88/CSRF != XSS.