CSRF requirement in the URL was removed in the ACP it would be nice if some front end elements could get the same level of treatment. Currently when using filters in Pages it adds the CSRF to the URL still and if you remove it the applied filters do not work.

That's all.

Yeah, I submitted that as feature request after the 4.0 release. 🙈

We have removed the CSRF key in many areas for 4.6 . Not sure about the filters

29 minutes ago, Daniel F said:

We have removed the CSRF key in many areas for 4.6 . Not sure about the filters

The odd thing is that I can't duplicate it here (when I tried it with the providers page) but when I remove the CSRF key from my URL all of the filters are cleared. For me it highlights the correct items in the filter section but the filter isn't applied to the page (aka there are no results and its not filtering) indicating that in some way on my site that its mandatory. This, I guess, could be a template level issue.

I can certainly replicate it here. Example:

https://invisioncommunity.com/third-party/providers/?advanced_search_submitted=1&sortby=primary_id_field&sortdirection=asc&content_field_124[1]=8

Shows all providers. Only with a key is it limited to 4 providers. 

My brain was putting it together incorrectly. It's behaving the same way as on my community. Its keeping the filter type highlighted but not actually filtering it. The one you linked has all providers but not JUST the Community Managers.