CSRF protections

If you want to replace the self-signed cert by a real one, you can try: [Script] Let's encrypt for GL.iNet router HTTPs access

Then you might access your router through your DDNS address (which works even inside your network)