Citi interview question

How avoid CSRF attack in Angular?