Status – Tested
Salesforce Update Description
Allow CSRF Protection on GET Requests to Visualforce Pages was a critical update in Spring ’17 and will be enforced for all orgs on October 15, 2017. This critical update gives you the option of ensuring that Visualforce pages receive a CSRF token with a GET request.