Tackling cross-site request forgery (CSRF) on company websites

Clicking on suspicious links in emails means that an attacker can use CSRF to fake any user-supplied input on a site and make it indistinguishable from a user doing it themselves.