Got Kittens?

This is CSRF sample posting Surprise to the vulnerable page.