This exploit works on works on Chrome Canary 57

The web platform is becoming increasingly powerful thanks to new APIs such as service worker. Security risk is always a concern, which is why many of these new features require secure origins. HTTPS preserves the integrity of your website and ensures connections with your users are encrypted. In an effort to make deploying HTTPS easier, Chrome 48 beta includes a new security panel in DevTools which will be rolling out more broadly over the next few days.

English article : https://khalil-shreateh.com/khalil.shtml/index.php/websites/websites-security/1255-cross-site-request-forgery-csrf-exploit-and-prevention.html

In this article you will learn what is Cross-Site Request Forgery (CSRF), How to exploit CSRF and how to protect against it .