test: support bypass CSRF

tools/ant-sword/src/main/java/com/reajason/javaweb/antsword/AntSwordManager.java

@@ -80,6 +80,7 @@ public class AntSwordManager {
             manager.setEntrypoint(entrypoint);
             Map<String, String> headers = new HashMap<>(16);
             headers.put("Content-Type", "application/x-www-form-urlencoded");
+            headers.put("Referer", entrypoint);
             headers.putAll(this.headers);
             manager.setHeaders(headers);
             return manager;

tools/behinder/src/main/java/com/reajason/javaweb/behinder/BehinderManager.java

@@ -171,6 +171,7 @@ public class BehinderManager {
             headers.put("User-Agent", "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0");
             headers.put("Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8");
             headers.put("Accept-Language", "zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2");
+            headers.put("Referer", entrypoint);
             headers.putAll(this.headers);
             manager.setHeaders(headers);
             return manager;

tools/godzilla/src/main/java/com/reajason/javaweb/godzilla/GodzillaManager.java

@@ -303,6 +303,7 @@ public class GodzillaManager implements Closeable {
             headers.put("User-Agent", "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0");
             headers.put("Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8");
             headers.put("Accept-Language", "zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2");
+            headers.put("Referer", entrypoint);
             headers.putAll(this.headers);
             manager.setHeaders(headers);
             if (entrypoint.startsWith("http")) {