Summary
Solid foundation for implementing CSRF protection across your web apps. Covers the main approaches: synchronizer tokens, double-submit cookies, SameSite attributes, and origin validation. The reference guides walk through implementations in Node.js/Express and Python Flask, plus frontend integration patterns. Worth noting it emphasizes the basics well, like never using GET for state changes and always pairing tokens with HTTPS. If you're building forms, payment flows, or anything that modifies server state, this gives you the patterns to prevent forged requests. The best practices section is actually useful, calling out common mistakes like storing tokens in localStorage.
Install to Claude Code
npx -y skills add aj-geddes/useful-ai-prompts --skill csrf-protection --agent claude-codeInstalls into .claude/skills of the current project.
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →
Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →
Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →Files
SKILL.md
Select a file.
Featured
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →
