feat: CSRF защита (double-submit cookie) — все мутирующие POST-роуты, login-форма

2026-05-30 13:28:01 +03:00
parent 2332827326
commit 695ed231e6
6 changed files with 75 additions and 10 deletions
@@ -9,6 +9,7 @@
  },
  "dependencies": {
    "cookie-parser": "^1.4.7",
+    "csrf-csrf": "^4.0.3",
    "dotenv": "^16.4.7",
    "ejs": "^3.1.10",
    "express": "^4.21.1",