How to protect Node.js apps from CSRF attacks

Simplified CSRF Protection Without Tokens or Hidden Form Fields for Web Frameworks

The article describes a developer's journey to implement CSRF (Cross-Site Request Forgery) protection for the Microdot web framework. Initia

Are You Protecting Your Customers From CSRF?

Go 1.25's CrossOriginProtection: A New Approach to CSRF Prevention

The article discusses Go 1.25's new http.CrossOriginProtection middleware and explores whether it enables secure web applications without tr

GitHub Token Theft Vulnerability Discovered in VSCode's Browser-Based github.dev Feature

A security vulnerability in GitHub's github.dev feature (browser-based VSCode) allows attackers to steal GitHub tokens with read/write acces

npm malware targeting Claude users leaks own GitHub token, reaches 676 downloads

An npm package called "mouse5212-super-formatter" targeting Claude users acted as information-stealing malware, reaching 676 downloads befor

Backdoored node-ipc npm releases steal developer credentials through DNS queries