The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles.
datenstrom yellow 0.7.3