expressjs / csurf

CSRF token middleware
MIT License
2.3k stars 216 forks source link

throw error when the user repeatedly call csurf in same middleware #230

Open Yu-Jack opened 3 years ago

Yu-Jack commented 3 years ago

I think and think over again in PR-228 and PR-229.
There are maybe few users repeatedly called csurf({cookie: true}) with same middleware.
So, I think I just warn this situation for now. In the future, we maybe could throw error instead of warning.

Yu-Jack commented 3 years ago

@dougwilson Is it okay?