Site-wide CSRF on Xporter actions and pages

Site-wide CSRF on admin settings page:

​1. Login to your Jira instance
​2. Click on the gear icon top right corner, and select Manage Apps
3. ​In the left menu, click on Global Settings
​4. Change any of the settings and notice that no CSRF protection is in place.
​5. Check any POST request to /secure/admin/views/Xporter* and notice that no CSRF protection is in place.

All the actions must be reviewed including action regarding Xporter Project level configuration.