ASM insert CSRF although not specify URL

see https://support.f5.com/csp/article/K11930 | Configuring CSRF protection

In the URLs List, click the URLs you want the system to examine.

Add at least one URL to the list. The system considers all URLs that are not in the list to be safe, unless another problem is discovered.

Note: Type the URL in the format: /index.html, /*/index.php, or /index.?html.

if you enable the CSRF feature, you need to specify a URL.