ASM insert CSRF although not specify URL

Hi   We're using LTM/ASM with v.12.1.3   and right now we see issue as we have enable CSRF protection but we didn't specify and URL in URL list.   From my understanding, F5 should insert csr...