CSRF protection bypass on any Django powered site via Google Analyticshackerone.com2 pointscujanovic10 years ago