Search results

Why is CSRF_SECRET exposed to client?

Status: Open.

#72 In juanbzz/next-csrf;

· fmendezpfister opened on Nov 4, 2024

Missing HttpOnly Cookies with setup() Wrapper Usage

Status: Open.

#71 In juanbzz/next-csrf;

· xereda opened on Mar 6, 2024

Next.js v13

Status: Open.

#69 In juanbzz/next-csrf;

· MaximKing1 opened on May 23, 2023

Failed to read secret cookie in setup function

Status: Open.

#67 In juanbzz/next-csrf;

· tochoromero opened on Apr 25, 2023

Keep original args of handler so we have access to the context

enhancementNew feature or requestNew feature or request

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#58 In juanbzz/next-csrf;

· rduque1 opened on Dec 13, 2022

Issues on live server

Status: Open.

#51 In juanbzz/next-csrf;

· vampiregrodon opened on Oct 20, 2022

The implementation probably defeats the purpose of CSRF protection

bugSomething isn't workingSomething isn't working

Status: Open.

#49 In juanbzz/next-csrf;

· sha256 opened on Jul 17, 2022

·  

v1

Pass context back to GetServerProps handler

Status: Open.

#48 In juanbzz/next-csrf;

· alpimany opened on Jul 4, 2022

Explain in the documentation when you need CSRF mitigation. Not every project needs it

documentationImprovements or additions to documentationImprovements or additions to documentation

Status: Open.

#28 In juanbzz/next-csrf;

· juanbzz opened on Sep 22, 2021

Explain in the documentation why exposing an API route to set up the CSRF token is a bad idea

documentationImprovements or additions to documentationImprovements or additions to documentation

Status: Open.

#27 In juanbzz/next-csrf;

· juanbzz opened on Sep 22, 2021

Env variable cant load on browser

Status: Open.

#25 In juanbzz/next-csrf;

· vedrane opened on Aug 20, 2021

Explain implementation

documentationImprovements or additions to documentationImprovements or additions to documentation

Status: Open.

#2 In juanbzz/next-csrf;

· juanbzz opened on Jun 29, 2020