CSRF protection bypass on any Django powered site via Google Analytics | Heykuki News