Referer Leakge in language changer may lead to FB token theft.

Summary

In this report, the researcher identified a CSRF vulnerability in the language changing function on https://www.rockstargames.com/GTAOnline/ that could be combined with other vulnerabilities to result in sensitive token theft (such as Oauth tokens). This vulnerability would be triggered when changing the language of the page when the payload input was provided. We have updated this function to no longer be vulnerable to such attacks, and this issue has been resolved.