CSRF Token in URL - concern raised by penetration test

[david-batranu]

The threat, as described in the report:

When transferred in the URL, the CSRF token is leaked in proxy logs and the browser's history. It may further be revealed through referrers. An attacker might be able to perform CSRF attacks, if the token is known.