if alice would like to launch the attack to anybody who visits her malicious web page. in this case, she does not know who is visiting the web page before hand. can she still launch the csrf attack to modify the victim’s elgg profile? please explain.
