Alter Pull #3176 - CSRF Whitelist