true alf-csrftoken {token}
{token}
{token}
GET /service/enterprise/admin/.* {token} {token} GET /s/enterprise/admin/.* {token} {token} GET /wcservice/enterprise/admin/.* {token} {token} GET /wcs/enterprise/admin/.* {token} {token} GET /service/admin/.* {token} {token} GET /s/admin/.* {token} {token} GET /wcservice/admin/.* {token} {token} GET /wcs/admin/.* {token} {token} GET /s/index|/s/ {token} {token} POST /s/index|/s/ {token} {token} {referer} {origin} POST
multipart/.+
{token} {token} {referer} {origin}
POST|PUT|DELETE {token} {token} {referer} {origin}
X-Frame-Options SAMEORIGIN