CSRF Vulnerability - Rails 3.2.9

Question

I am using rails 3.2.9 in webrick. My site seems to be vulnerable to CSRF. I already added <% = csrf_meta_tags%> to the layout file. And added Protect_from_forgery in my application controller.

but when I try to make a request to submit from a form in another domain, this is possible. My site still seems vulnerable to CSRF ..

I am amazed, I wonder how to proceed! Pls help me