Generated on Apr 23, 2024 via pnpm

Npm

Home

csrf-csrf 1.0.2

A utility package to help implement stateless CSRF protection using the Double Submit Cookie Pattern in express.

csrf

middleware

express

tokens

Package summary

issues

licenses

Package created

24 Sep 2022

Version published

25 Sep 2022

Maintainers

Total deps

Direct deps

License

ISC

Issues

2 low severity issues

low

csrf-csrf@1.0.2

Incorrect default cookie name and recommendation

Recommendation: Upgrade to version 2.2.1 or later

via: csrf-csrf@1.0.2

csrf-csrf@1.0.2

Incorrect default cookie name and recommendation

Recommendation: Upgrade to version 2.2.1 or later

via: csrf-csrf@1.0.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

5 Packages, Including:

cookie-parser@1.4.6

cookie-signature@1.0.6

cookie-signature@1.2.1

cookie@0.4.1

cookie@0.5.0

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

1 Packages, Including:

csrf-csrf@1.0.2

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of csrf-csrf 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type
cookie-parser	1.4.6	4.2 kB	MIT	prod
cookie-signature	1.2.1	2.36 kB	MIT	prod
cookie	0.5.0	7.87 kB	MIT	prod

Tree

Treemap

All Versions

csrf-csrf 1.0.2