Issues

• Why is CSRF_SECRET exposed to client?

  juanbzz/next-csrf#72 · Filter by author fmendezpfister opened on Nov 4, 2024
  1

• Missing HttpOnly Cookies with setup() Wrapper Usage

  juanbzz/next-csrf#71 · Filter by author xereda opened on Mar 6, 2024

• Next.js v13

  juanbzz/next-csrf#69 · Filter by author MaximKing1 opened on May 23, 2023
  2

• Failed to read secret cookie in setup function

  juanbzz/next-csrf#67 · Filter by author tochoromero opened on Apr 25, 2023

• Keep original args of handler so we have access to the context

  enhancementgood first issuehelp wanted
  juanbzz/next-csrf#58 · Filter by author rduque1 opened on Dec 13, 2022
  4

  

• The implementation probably defeats the purpose of CSRF protection

  bug
  juanbzz/next-csrf#49 · Filter by author sha256 opened on Jul 17, 2022 · v1
  3

• Pass context back to GetServerProps handler

  juanbzz/next-csrf#48 · Filter by author alpimany opened on Jul 4, 2022
  4

• Explain in the documentation when you need CSRF mitigation. Not every project needs it

  documentation
  juanbzz/next-csrf#28 · Filter by author juanbzz opened on Sep 22, 2021
  

• Explain in the documentation why exposing an API route to set up the CSRF token is a bad idea

  documentation
  juanbzz/next-csrf#27 · Filter by author juanbzz opened on Sep 22, 2021
  

• Env variable cant load on browser

  juanbzz/next-csrf#25 · Filter by author vedrane opened on Aug 20, 2021
  3

• Explain implementation

  documentation
  juanbzz/next-csrf#2 · Filter by author juanbzz opened on Jun 29, 2020
  2