remix-run/remix csrf-middleware@0.1.0

csrf-middleware v0.1.0

on GitHub

Minor Changes

• Add the initial release of @remix-run/csrf-middleware.

  • Expose csrf(options) and getCsrfToken(context) for session-backed CSRF protection in
    Remix apps that accept unsafe form submissions.
  • Validate a per-session token together with request origin metadata, with support for token
    transport in headers, form data, and query params.
  • Allow apps to layer csrf() after cop() when they need stricter token-backed protection
    on top of browser-origin filtering.

Patch Changes

• Bumped @remix-run/* dependencies:
  • fetch-router@0.18.0