CSRF for local network attacks