<div>CSRF in AppSearch allows creation of “curations”</div>