    public function cloneGroup(TransactionGroup $group)
    {

        /** @var GroupCloneService $service */
        $service  = app(GroupCloneService::class);
        $newGroup = $service->cloneGroup($group);

        // event!
        event(new StoredTransactionGroup($newGroup));

        app('preferences')->mark();

        $title = $newGroup->title ?? $newGroup->transactionJournals->first()->description;
        $link  = route('transactions.show', [$newGroup->id]);
        session()->flash('success', trans('firefly.stored_journal', ['description' => $title]));
        session()->flash('success_url', $link);

        return redirect(route('transactions.show', [$newGroup->id]));
    }
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.