Issue #2816173 by lussoluca, willzyx: Devel Menu's CSRF protected links in Webprofiler toolbar rendered with placeholder instead of token