[out-of-scope] toxiproxy: Lack of CSRF protection allows an attacker to gain access to internal Shopify network

Disclaimer In case this report ever becomes public I wanted to start it out with a disclaimer so it doesn't become referenced an example for out-of-scope/policy violating submissions in the future:

$ brew update
	[snip]
$ brew install toxiproxy
	==> Installing toxiproxy from shopify/shopify
	==> Downloading https://github.com/Shopify/toxiproxy/releases/download/v2.1.1/toxiproxy-server
	Already downloaded: /Users/luke/Library/Caches/Homebrew/toxiproxy-2.1.1
	==> Downloading …