CSRF on a strawberry breaker