Dependency version bump

expressjs / csurf

CSRF token middleware

MIT License

2.3k stars 217 forks source link

Dependency version bump #200

Closed JaredClayborn closed 4 years ago

JaredClayborn commented 4 years ago

The newest version of the dependency "cookie" has a sameSite option of "none" which will be required in future versions of Chrome in conjunction with the secure flag to send the cookie to the backend.

JaredClayborn commented 4 years ago

I misunderstood what I read the first time around. Not so much on the required in future versions of Chrome, but still a nice to have.