Websites can make a http request to other websites, so websites need to be sure that requests to "buy now" or "add comment" are genuine. https://scotthelme.co.uk/csrf-is-dead/ #webdev
This is the Mastodon server used by @h2g2bob. Most posts are public, take a look around.
Why not take a look at dbatley.com for other interesting stuff.