### Expected behavior CSRF attack should be prevented ### Actual behavior CSRF works 😉 ### Steps to reproduce 1: Open https://demo.pimcore.fun/en/cart/add-to-cart?id=12 on a browser. 2: Check out the cart with Jaguar E-Type product.