Comments (1)
Cool with the pseudoRandomBytes stuff (though it's still better than the original Express implementation which used Math.random, iirc).
Regarding the the concatenation, we just emulated the Express implementation. I'd support us breaking that in a major release if need be.
from lusca.
Related Issues (20)
- CSRF error status code HOT 3
- csrf http2 token validation fails while http1 passes HOT 2
- Exempting XSRF-TOKEN for some requests HOT 2
- Support CSRF black/white listing on URL params HOT 2
- X-XSS-Protection report uri HOT 1
- How to send post with CSRF token without manually adding a form or whitelisting/blacklisting HOT 2
- Is helmet needed with lusca? HOT 2
- CSRF blacklist and whitelist not working as expected for multiple endpoints. HOT 1
- DNS Rebinding protection
- lusca requires req.session
- How skip api css js avoid redundant?
- CSRF token missing at app.use(lusca.csrf())
- Nonce is not being generated HOT 2
- CSP policy is wrong when whitespace is missing before 'self'
- Change CSRF-Token name
- Cookie “XSRF-TOKEN” will be soon rejected HOT 1
- lusca.xframe value - "ALLOW-FROM uri" is obselete
- Setting CSRF token on the blacklisted routes.
- Rename csrf blacklist/whitelist configs HOT 1
- CSRF token is mismatch even in correct things. HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from lusca.