Protect your web forms from forged requests.
What it does
Guides implementation of CSRF defenses for web forms and state-changing requests.
When to use it
Use for form submissions, state-changing operations, authentication, payments, account management, and POST/PUT/DELETE requests.
How to use it
It changes how the agent implements web forms and state-changing requests by applying CSRF tokens, cookie restrictions, and header validation.
What you provide
- An existing project
Uses
Good to know
- a credential is hard-coded: SECRET_KEY
Latest review
What you need · 1
The Node.js/Express implementation reads SESSION_SECRET from the environment to configure its session secret.
Access · 0
No additional actions listed.