CSRF spotter por Malm

It simply finds forms without hidden inputs.
Expect lots of false positives and false negatives!