I'm currently in the process of building a browser helper object. One of the things the BHO has to do is to make cross-site requests that bypass the cross-domain policy. For this, I'm exposing a __MyBHONameSpace.Request method that uses WebClient internally. However, it has occurred to me that anyone that is using my BHO now has a CSRF vulnerability everywhere as a smart attacker can now make arbitrary requests from my clients' computers. Is there any clever way to mitigate this?

Securing a Browser Helper Object

I'm currently in the process of building a browser helper object.

One of the things the BHO has to do is to make cross-site requests that bypass the cross-domain policy.

For this, I'm exposing a __MyBHONameSpace.Request method that uses WebClient internally.
However, it has occurred to me that anyone that is using my BHO now has a CSRF vulnerability everywhere as a smart attacker can now make arbitrary requests from my clients' computers.

Is there any clever way to mitigate this?