4.13 Protects against CSRF

Verify that the application or framework uses strong random anti-CSRF tokens or has another transaction protection mechanism.

Levels: 1, 2, 3