expressjs / security-wg

Express.js Security Working Group
MIT License
6 stars 2 forks source link

Extend utilities for csrf #9

Open UlisesGascon opened 3 months ago

UlisesGascon commented 3 months ago

fastify/csrf has extended the utilities to prevent cookie tossing and reply attacks (see: https://github.com/fastify/csrf/pull/2), as fastify/csrf is a fork from https://github.com/pillarjs/csrf at f0d66c91ea4be6d30a03bd311ed9518951d9c3e4. We can port the changes but taking in account the Node.js versions that we support

Thanks @mcollina for the ping.