Drupal uncrosses fingers, promises secured patching

Don't worry too much about CSRF, security wonks chirp

Drupal is switching to secured channels for updating its content management system, after IOActive security bod Fernando Arnaboldi reported it sought patches in the clear."