____ is a sort of attack when the attacker sends a form to a separate website on your behalf that might result in harm or the disclosure of sensitive data.

Ruby on Rails is a server-side / back end web application framework written in Ruby under the MIT License. Rails is a model–view–controller framework, providing default structures for a database, a web service, and web pages.