Cross Site Request Forgery and Same Origin Policy

There has definitely been an increase in the number of conversations around XSS and CSRF.  If you are looking to understand the basics of this attack, this is an excellent article....

Same-Origin Policy Part 1: Why we’re stuck with things like XSS and XSRF/CSRF