XWiki-9361 : CSRF protection is vulnerable to UI redressing