Pergunta de entrevista da empresa Optiv

Explain the differences between the web attack vectors XSS and CSRF, and how you would use them in an engagement.