message: Add explanation why CSRF test has to stay disabled
diff: @@ -75,8 +75,8 @@ describe('/profile', () => {
  })
  }
  - describe('challenge "csrf"', () => {
  - xit('should be possible to perform a CSRF attack against the user profile page', () => { // FIXME Fails on Travis-CI. Also fails when run manually with "Uncaught DOMException: Blocked a frame with origin "http://htmledit.squarefree.com" from accessing a cross-origin frame."
  + describe('challenge "csrf"', () => { // FIXME Only works on Chrome <80 but Protractor uses latest Chrome version. Test can probably never be turned on again.
  + xit('should be possible to perform a CSRF attack against the user profile page', () => {
  browser.waitForAngularEnabled(false)
  browser.driver.get('http://htmledit.squarefree.com')
  browser.driver.sleep(1000)
  