Enforce CSRF tokens on state-changing endpoints across web frameworks.
npx skills add https://github.com/thejefflarson/soundcheck --skill csrf-thejefflarson
Please help me install this Agent Skill. Skill: csrf Source: https://github.com/thejefflarson/soundcheck/tree/main/.claude/skills/csrf Command: npx skills add https://github.com/thejefflarson/soundcheck --skill csrf-thejefflarson
Cross-Site Request Forgery (CSRF) vulnerabilities allow attackers to trick authenticated users into performing unwanted actions. This Skill helps you recognize, prevent, and remediate CSRF weaknesses in web applications.
Scan your web project and enable CSRF protection by adding per-form tokens and enabling middleware across all routes.
High-intent search queries and answers about installing and using this skill.
To prevent CSRF attacks in web applications using cookie-based sessions, enforce CSRF middleware that validates per-form tokens on state-changing endpoints and configure session cookies with SameSite attributes to prevent token leakage.
Yes, CSRF middleware works with Django, Flask, Express, Spring, Go, and Rust. It enforces per-form CSRF tokens and validates POST, PUT, PATCH, and DELETE requests across these frameworks to block unauthorized state-changing actions.
Adding CSRF tokens to AJAX requests and form submissions requires enabling CSRF middleware across all routes. The system validates tokens on state-changing endpoints to ensure authenticated users cannot be tricked into performing unwanted actions.
Cross-site request forgery is a vulnerability where attackers trick authenticated users into performing unwanted actions. You need CSRF protection whenever web applications use cookie-based sessions for form submissions or AJAX requests to secure state-changing endpoints.
Session cookies need SameSite and HttpOnly attributes for form security to prevent CSRF token leakage. SameSite restricts cookie transmission on cross-site requests, while HttpOnly protects tokens from client-side scripts during endpoint validation.
The best way to validate CSRF tokens for state-changing endpoints is enforcing CSRF middleware that requires valid per-form tokens for POST, PUT, PATCH, and DELETE requests, ensuring cookies use secure attributes to prevent leakage.
reginadelrio-vadaiIntegrate Supabase Auth with Next.js App Router using @supabase/ssr.
langbyyiIdentify and exploit CSRF vulnerabilities in web applications, including SameSite bypasses.
Sir-chawakornConfigure HTTP security headers and strict nonce-based Content-Security-Policy directives.
salmanabdurrahmanValidate CSRF token enforcement and SameSite attributes on state-changing endpoints.
