From: cowwoc <cowwoc_at_bbs.darktech.org>
Date: Wed, 04 Jun 2014 20:33:15 -0400
According to http://security.stackexchange.com/a/23373/5002 the CSRF
filter that ships with Jersey might not be safe, or not very much
longer. Perhaps it's worth adding a warning to the Javadoc and/or
enhancing the implementation?