Cross-site request forgery involves:

A. A request sent by a malicious user from a browser to a server
B. A server making a request to another server without the user's knowledge
C. Modification of a request by a proxy between client and server.
D. A browser making a request to a server without the user's knowledge