CSRF vulnerability with flash redirect [RTFACT-17004]