What’s the problem with the CSURF package?

What’s the problem with the CSURF package?