Portswigger – GraphQL API Vulnerabilities – Lab #5 Performing CSRF exploits over GraphQL