Forms: the CSRF token is protected against BREACH attack

Here's a nice demonstration of BREACH attack:

http://resources.infosecinstitute.com/the-breach-attack/