How can I use JavaScript to perform CSRF attacks in a controlled ethical hacking environment

Question

In a controlled lab environment, I’m experimenting with CSRF (Cross-Site Request Forgery) attacks to better understand the vulnerabilities and defenses against it. I know CSRF leverages the trust between a browser and a server to perform unauthorized actions.

Could someone provide guidance on creating a basic CSRF script in JavaScript for testing purposes? I’d like to know more about how this attack functions technically, including any limitations or practical aspects of simulating it ethically.