expressjs / csurf

Watch 43
Star 1.9k
Fork 180

Code
Issues 16
Pull requests 7
Actions
Security
Insights

Code
Issues
Pull requests
Actions
Security
Insights

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Pick a username

Email Address

Password

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

16 Open 160 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels.

Projects

Filter by project

Milestones

Filter by milestone

Assignee

Filter by who’s assigned

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated

Most reactions

Usage with native mobile app? question

#218 opened Jun 21, 2020 by abcd-ca

‘EBADCSRFTOKEN: Invalid CSRF token’ error on production but not on localhost

#215 opened Jun 7, 2020 by marty14

ForbiddenError: invalid csrf token when used behind a reverse proxy question

#214 opened May 29, 2020 by carlo161

csurf with appolo serve question

#212 opened Apr 26, 2020 by KiziKr

`Invalid CSRF Token` error for some browsers, mostly for iOS Safari awaiting more info question

#207 opened Feb 27, 2020 by just4fun

"ForbiddenError: invalid csrf token", but only sometimes. awaiting more info question

#204 opened Jan 7, 2020 by Monokai

Token Lifetime

#156 opened Jul 10, 2018 by ran-j

Add credentials warning to documentation

#126 opened Jul 15, 2017 by franciscop

Feature add 'Encrypted Token Pattern' good first contribution

#121 opened May 20, 2017 by cmseaton42

per-page CSRF token support good first contribution

#120 opened May 10, 2017 by francisfernando

how to handle csurf function not being available on req object when a session store goes down discuss

#60 opened Mar 13, 2015 by kellyrmilligan

Remove cookie-parser requirement for double-submit cookies enhancement

#45 opened Jan 6, 2015 by dougwilson

Expose token validation function enhancement

#43 opened Dec 22, 2014 by jkrems

cookie option issues enhancement question

#14 opened May 28, 2014 by jonathanong 2.0.0

separating token creation and checking enhancement

#10 opened May 13, 2014 by mscdex 2.0.0

Always check CSRF token if request has body enhancement

#8 opened May 7, 2014 by dougwilson 2.0.0

ProTip! no:milestone will show everything without a milestone.