https://github.com/expressjs/csurf

CSRF token middleware
https://github.com/expressjs/csurf

csrf expressjs javascript middleware nodejs

Last synced: about 1 month ago
JSON representation

CSRF token middleware

• Host: GitHub
• URL: https://github.com/expressjs/csurf
• Owner: expressjs
• License: mit
• Archived: true
• Created: 2014-03-05T06:45:25.000Z (over 10 years ago)
• Default Branch: master
• Last Pushed: 2022-09-13T19:40:21.000Z (about 2 years ago)
• Last Synced: 2024-09-22T23:12:23.069Z (about 2 months ago)
• Topics: csrf, expressjs, javascript, middleware, nodejs
• Size: 178 KB
• Stars: 2,304
• Watchers: 37
• Forks: 216
• Open Issues: 20
• Metadata Files:
  • Readme: README.md
  • Changelog: HISTORY.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-express - csurf - Node.js CSRF protection middleware (Middleware)
• awesome-nodejs - csurf - 防止 csrf 攻击。  (GIT 仓库 / 安全)

README

        
# csurf

## Deprecated

This npm module is currently deprecated due to the large influx of security vulunerability reports

received, most of which are simply exploiting the underlying limitations of CSRF itself. The Express.js

project does not have the resources to put into this module, which is largely unnecessary for modern

SPA-based applications.

Please instead use an alternative CSRF protection package if you do need one: https://www.npmjs.com/search?q=express%20csrf