[gitlab: Missing CSRF in System Hooks]
https://about.gitlab.com/2018/08/28/security-release-gitlab-11-dot-2-dot-2-released/