CSRF protection for /-/messages tool and writable canned queries #793
Description
The
/-/messagesdebug tool will need CSRF protection or people will be able to add messages using a hidden form on another website.
Originally posted by @simonw in #790 (comment)