Available fixes are moving the form to POST (which we don't want) or use setFormIdentifier so that GET submission can be detected (but this adds a URL parameter, so looks ugly).
https://www.mediawiki.org/wiki/Special:CiteThisPage
[Reported at https://www.mediawiki.org/wiki/Topic:Uryz8yld7onq4r1k .]