[PA-DSS] 5.2.5 Cross-site request forgery (CSRF) (do not rely on authorization credentials and token

5.2.5 Cross-site request forgery (CSRF) (do not rely on authorization credentials and tokens automatically submitted by browsers).