Repository navigation

All pull requests

feat: add option to strip CSRF token from form values after validation
#217AdamMagued opened Oct 9, 2026
fix(origin): handle null Origin header validation appropriately
#216AdamMagued opened Oct 9, 2026
helpers: read random bytes via injectable reader
#214team-humaki opened Sep 17, 2026
csrf: honor Sec-Fetch-Site same-origin when Host is rewritten
#213team-humaki opened Sep 15, 2026
csrf: treat Secure(false) as plaintext for Origin checks
#212team-humaki opened Sep 14, 2026
Accept scheme://host entries in TrustedOrigins
#211AshSgDe29071999 opened Aug 29, 2026
fix: use io.ReadFull(rand.Reader, b) in generateRandomBytes
#210aoright opened Aug 20, 2026
fix: use io.ReadFull(rand.Reader, b) in generateRandomBytes
#209aoright opened Aug 19, 2026
csrf: reject Origin: null as an opaque origin
#207c-tonneslan opened May 17, 2026
Update README with CSRF token handling instructions in JS SPA
#206pawciobiel opened Mar 25, 20268 tasks
Java
#200savas5445 opened Jun 22, 202512 tasks
Python+chromedriver
#199savas5445 opened Jun 22, 202512 tasks
Csrf
#198savas5445 opened Jun 22, 202512 tasks
Node.js
#197savas5445 opened Jun 22, 202512 tasks
Python 3.10+
#196savas5445 opened Jun 22, 202512 tasks
Postgre sql/mongo db
#195savas5445 opened Jun 22, 202512 tasks
Update README.md
#191me-th opened May 16, 20251 of 7 tasks
issues/179 Add option to use base64 URL-safe encoding format for CSRF token
#180Sang-Hyuk opened Dec 6, 20244 of 12 tasks
Token from context
#176FlorianLoch opened Mar 4, 2024Contributor4 of 12 tasks
9

Pull requests