What is CSRF, and what does the frontend need to do to prevent it?

Write or say your answer first, then compare it with the model answer.