[BUG 4.6.12.1] Reactivating Commerce product throws a CSRF key exception while IN_DEV

[teraßyte]

While the board is IN_DEV mode I clicked to reactive a purchase on frontend and the url throws an exception because of the csrfKey parameter in it:

Example URL: https://localhost/clients/purchases/19-new-test/extra/?act=reactivate&csrfKey=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

===

Whoops\Exception\ErrorException thrown with message "An 200 response is being sent however the CSRF key is present in the requested URL. CSRF keys should be sent via POST or the request should be redirected to a URL not containing a CSRF key once finished."

Stacktrace:
#8 Whoops\Exception\ErrorException in /system/Output/Output.php:810
#7 trigger_error in /system/Output/Output.php:810
#6 IPS\_Output:sendOutput in /init.php:913
#5 IPS\toolbox_hook_Output:sendOutput in /system/Dispatcher/Dispatcher.php:173
#4 IPS\_Dispatcher:finish in /system/Dispatcher/Standard.php:113
#3 IPS\Dispatcher\_Standard:finish in /system/Dispatcher/Front.php:687
#2 IPS\Dispatcher\_Front:finish in /system/Dispatcher/Dispatcher.php:155
#1 IPS\_Dispatcher:run in /init.php:913
#0 IPS\Dispatcher\toolbox_hook_dispatcherStandard:run in /index.php:13