CSRF debug helper: Trigger CSRF protection

configure.zcml

<configure
    xmlns:browser="http://namespaces.zope.org/browser">

    <browser:page
        name="trigger-csrf"
        for="Products.CMFPlone.interfaces.IPloneSiteRoot"
        class=".trigger.TriggerCSRFProtection"
        permission="cmf.ManagePortal"
        />

</configure>

trigger.py

from zope.publisher.browser import BrowserView

class TriggerCSRFProtection(BrowserView):

    def __call__(self):
        self.request.response.setHeader("Content-Type", 'text/html')
        self._do_write()
        return '<h1>Done</h1>'

    def _do_write(self):
        self.context.myattr = 'foo'