Jcerjak plip10359 security controlpanel

@vangheem Is it possible that the csrf protection never has been implemented for plone.app.registry?