diff --git a/pmd-visualforce/src/test/resources/net/sourceforge/pmd/lang/vf/rule/security/xml/VfCsrf.xml b/pmd-visualforce/src/test/resources/net/sourceforge/pmd/lang/vf/rule/security/xml/VfCsrf.xml
index 3f7a0968eb..82e500147c 100644
--- a/pmd-visualforce/src/test/resources/net/sourceforge/pmd/lang/vf/rule/security/xml/VfCsrf.xml
+++ b/pmd-visualforce/src/test/resources/net/sourceforge/pmd/lang/vf/rule/security/xml/VfCsrf.xml
@@ -1,6 +1,5 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <test-data>
-
 	<test-code>
 		<description><![CDATA[
 CSRF by starting a controller with an EL action
@@ -8,8 +7,28 @@ CSRF by starting a controller with an EL action
 		<expected-problems>1</expected-problems>
 		<code><![CDATA[
 <apex:page controller="AcRestActionsController" action="{!csrfInitMethod}" >
+]]></code>
+		<source-type>vf</source-type>
+	</test-code>
+	<test-code>
+		<description><![CDATA[
+Controller without actions is perfectly safe
+     ]]></description>
+		<expected-problems>0</expected-problems>
+		<code><![CDATA[
+<apex:page controller="AcRestActionsController"  >
 ]]></code>
 		<source-type>vf</source-type>
 	</test-code>
 
+	<test-code>
+		<description><![CDATA[
+JS action on load is perfectly safe     
+	]]></description>
+		<expected-problems>0</expected-problems>
+		<code><![CDATA[
+<apex:page controller="AcRestActionsController" action="init()" >
+]]></code>
+		<source-type>vf</source-type>
+	</test-code>
 </test-data>