Mail.ru: CSRF на отправку вопроса на [games.mail.ru]

CSRF in gmr.operator.mail.ru allowed to send a question on behalf of the user to TimeZero project support. CSRF to send a question in the disabled method /support/tz/questions/ajax in the interface...