`Cross-Site Request Forgery` to better match the abbreviation?