Fix CSRF filter vilnerability