Sends credentialed cross-origin requests without CSRF headers so iast_csrf_like_requests can raise findings.
No CSRF token headers or cookies are added on purpose.
The request uses credentials: 'include' to mirror authenticated cross-site actions.