CSRF validation missing - enhanced rule forked from main CodeQL queries: https://github.com/advanced-security/codeql-queries/pull/157 - adds a hit on this repo: https://github.com/appsecco/dvcsharp-api