Is it possible to protect against CSRF by adding a Token to the link address using JavaScript?

Question

CSRF

Good day!
I would like to know your opinion, what possible vulnerabilities remain in CSRF protection if, on any event
$("a").on("click", ...)
, we call a function that adds an argument to our link with a Token that is used to validate the operation?
What is the risk of taking the Token, that is, can we use a salted hash from the user's session key in its role?
Is the risk of Token withdrawal coming from potential resource XSS vulnerabilities, or is there something else to look out for?
I know that there is a lot of literature on this topic, so I wanted to ask in advance not to be limited to links to manuals, but to discuss a little on the topic presented.
PS: I understand that using random token keys is definitely more secure.