CSRF protection bypass due to Google analytics and weird server cookie parsinghackerone.com97 pointsamenghra11 years ago