message: Mention other browsers for CSRF info
diff: hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#obtain-a-deluxe-membership-without-paying-for-it'
  key: freeDeluxeChallenge
  -
  - name: 'CSRF' # Not automatically tested! No longer works in Chrome >=80!
  + name: 'CSRF' # Not automatically tested! No longer works in Chrome >=80 or other latest browsers!
  category: 'Broken Access Control'
  description: 'Change the name of a user by performing Cross-Site Request Forgery from <a href="http://htmledit.squarefree.com">another origin</a>.'
  difficulty: 3
  