'For CSRF attack we need request with payload and persistent/session
cookies.
:return: True if the request can have a CSRF vulnerability'

def _is_suitable(self, freq):

    for cookie in self._uri_opener.get_cookies():
        if (freq.get_url().get_domain() in cookie.domain):
            break
    else:
        return False
    if ((freq.get_method() == 'GET') and self._strict_mode):
        return False
    if ((not freq.get_uri().has_query_string()) and (not freq.get_raw_data())):
        return False
    om.out.debug(('%s    is    suitable    for    CSRF    attack' % freq.get_url()))
    return True
