CSRF Diagram (3/3)