CSRF where Referer validation depends on header being present 1 CSRF where Referer validation depends on header being present 16/03/2025