diff --git a/notes/pics/csrf.png b/notes/pics/csrf.png
index 8ff486a2..a36d1eb2 100644
Binary files a/notes/pics/csrf.png and b/notes/pics/csrf.png differ
diff --git a/tools/diagram/src/csrf.svg b/tools/diagram/src/csrf.svg
index 2c61dbdb..b8ab51be 100644
--- a/tools/diagram/src/csrf.svg
+++ b/tools/diagram/src/csrf.svg
@@ -10,7 +10,7 @@
     .arrow { stroke: #666; stroke-width: 1.3; fill: none; marker-end: url(#a); }
     .reply { stroke-dasharray: 5 4; }
     .lost { stroke: #C0605A; marker-end: url(#x); }
-    .shadow { fill: #C0C0C0; }
+    .shadow { fill: #DADADA; }
   </style>
   <defs>
     <marker id="a" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto">
@@ -25,13 +25,13 @@
   <line x1="90" y1="76" x2="90" y2="322" class="life"/>
   <line x1="300" y1="76" x2="300" y2="322" class="life"/>
   <line x1="510" y1="76" x2="510" y2="322" class="life"/>
-  <rect x="46" y="48" width="94" height="30" rx="6" class="shadow"/>
+  <rect x="45" y="47" width="94" height="30" rx="6" class="shadow"/>
   <rect x="43" y="45" width="94" height="30" rx="6" fill="#B0E3E6"/>
   <text x="90" y="64.5" class="head">用户浏览器</text>
-  <rect x="263" y="48" width="80" height="30" rx="6" class="shadow"/>
+  <rect x="262" y="47" width="80" height="30" rx="6" class="shadow"/>
   <rect x="260" y="45" width="80" height="30" rx="6" fill="#B1DDF0"/>
   <text x="300" y="64.5" class="head">银行网站</text>
-  <rect x="473" y="48" width="80" height="30" rx="6" class="shadow"/>
+  <rect x="472" y="47" width="80" height="30" rx="6" class="shadow"/>
   <rect x="470" y="45" width="80" height="30" rx="6" fill="#F3C6C2"/>
   <text x="510" y="64.5" class="head">恶意网站</text>
   <line x1="94" y1="100" x2="296" y2="100" class="arrow"/>