CSRF Disabled for Session API Session cookie API without CSRF token — state-changing POST vulnerable. CSRF Disabled for Session API · Home · Support the platform