diff --git a/notes/pics/csrf.png b/notes/pics/csrf.png
index a36d1eb2..0a841bb1 100644
Binary files a/notes/pics/csrf.png and b/notes/pics/csrf.png differ
diff --git a/tools/diagram/src/csrf.svg b/tools/diagram/src/csrf.svg
index b8ab51be..03fe7e2e 100644
--- a/tools/diagram/src/csrf.svg
+++ b/tools/diagram/src/csrf.svg
@@ -1,23 +1,23 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="600" height="342" viewBox="0 0 600 342">
   <style>
-    text { font-family: "PingFang SC", "Microsoft YaHei", Helvetica, Arial, sans-serif; fill: #666; font-size: 13px; }
+    text { font-family: "PingFang SC", "Microsoft YaHei", Helvetica, Arial, sans-serif; fill: #3F3F3F; font-size: 13px; }
     .head { font-weight: bold; text-anchor: middle; }
     .msg { text-anchor: middle; font-size: 12px; }
     .note { font-size: 12px; fill: #C0605A; }
     .ok { fill: #6A9F68; }
-    .title { font-weight: bold; font-size: 15px; fill: #777; text-anchor: middle; }
+    .title { font-weight: bold; font-size: 15px; fill: #333; text-anchor: middle; }
     .life { stroke: #BBB; stroke-width: 1; stroke-dasharray: 4 4; }
-    .arrow { stroke: #666; stroke-width: 1.3; fill: none; marker-end: url(#a); }
+    .arrow { stroke: #555; stroke-width: 1.1; fill: none; marker-end: url(#a); }
     .reply { stroke-dasharray: 5 4; }
     .lost { stroke: #C0605A; marker-end: url(#x); }
     .shadow { fill: #DADADA; }
   </style>
   <defs>
     <marker id="a" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto">
-      <path d="M1,1 L9,5 L1,9" fill="none" stroke="#666" stroke-width="1.6"/>
+      <path d="M1,1.5 L9.5,5 L1,8.5 z" fill="#555"/>
     </marker>
     <marker id="x" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto">
-      <path d="M1,1 L9,5 L1,9" fill="none" stroke="#C0605A" stroke-width="1.6"/>
+      <path d="M1,1.5 L9.5,5 L1,8.5 z" fill="#C0605A"/>
     </marker>
   </defs>
   <rect width="100%" height="100%" fill="#FFFFFF"/>
@@ -25,13 +25,10 @@
   <line x1="90" y1="76" x2="90" y2="322" class="life"/>
   <line x1="300" y1="76" x2="300" y2="322" class="life"/>
   <line x1="510" y1="76" x2="510" y2="322" class="life"/>
-  <rect x="45" y="47" width="94" height="30" rx="6" class="shadow"/>
-  <rect x="43" y="45" width="94" height="30" rx="6" fill="#B0E3E6"/>
+  <rect x="43" y="45" width="94" height="30" rx="6" fill="#C6ECE9" stroke="#7DBCB7"/>
   <text x="90" y="64.5" class="head">用户浏览器</text>
-  <rect x="262" y="47" width="80" height="30" rx="6" class="shadow"/>
-  <rect x="260" y="45" width="80" height="30" rx="6" fill="#B1DDF0"/>
+  <rect x="260" y="45" width="80" height="30" rx="6" fill="#C6E4FB" stroke="#7FB2D6"/>
   <text x="300" y="64.5" class="head">银行网站</text>
-  <rect x="472" y="47" width="80" height="30" rx="6" class="shadow"/>
   <rect x="470" y="45" width="80" height="30" rx="6" fill="#F3C6C2"/>
   <text x="510" y="64.5" class="head">恶意网站</text>
   <line x1="94" y1="100" x2="296" y2="100" class="arrow"/>