A CSRF Fix That Stopped Running: CVE-2026-68923 in MobSF

A defender reads a settings file and sees the controls that are declared. An attacker reads the same file and asks a quieter question: which of these declarations is actually wired into the request pa