'Test URLs for CSRF vulnerabilities.
:param freq: A FuzzableRequest'

def audit(self, freq, orig_response):

    if (not self._is_suitable(freq)):
        return
    if self._is_origin_checked(freq, orig_response):
        om.out.debug(('Origin    for    %s    is    checked' % freq.get_url()))
        return
    if self._find_csrf_token(freq):
        return
    msg = ('Cross    Site    Request    Forgery    has    been    found    at:    %s' % freq.get_url())
    v = Vuln.from_fr('CSRF    vulnerability', msg, severity.MEDIUM, orig_response.id, self.get_name(), freq)
    self.kb_append_uniq(self, 'csrf', v)
