63:dd75d24475c0 Go to Latest
Turn our TODO into a BUG. Lack of CSRF protection is most decidedly a bug, so let's list it as such.