krakenjs / lusca

Application security for express apps.
Other
1.79k stars 139 forks source link

CSRF token missing at app.use(lusca.csrf()) #135

Closed darklight147 closed 3 years ago

darklight147 commented 4 years ago

app.use((req, res, next) => { if (req.path === '/api/upload') { // Multer multipart/form-data handling needs to occur before the Lusca CSRF check. next(); } else { /lusca.csrf()(req, res, next); // <-- error here } });