3 ms·Sure. All it takes is a REST endpoint without the proper XSRF checks.by zigzigzag 10y agoSure. All it takes is a REST endpoint without the proper XSRF checks.