Container: pwned-by-csrf alive