CSRF Diagram (2/3)