Implements CSRF protection using synchronizer tokens, double-submit cookies, and SameSite attributes. Use when securing web forms, protecting state-changing endpoints, or implementing defense-in-depth authentication.
Implements CSRF protection for web applications using synchronizer tokens, double-submit cookies, and SameSite attributes.
Why this plugin
Provides production-ready CSRF defense patterns for securing web forms and state-changing endpoints. Solves cross-site request forgery vulnerabilities with multiple defense layers.
Prerequisites
Requires a web application framework capable of setting cookies and handling middleware. No external API keys needed.
npx claudepluginhub secondsky/claude-skillsComplete collection of battle-tested Claude Code configs from an Anthropic hackathon winner - agents, skills, hooks, and rules evolved over 10+ months of intensive daily use
Multi-perspective code analysis covering architecture, security, and best practices
XSS prevention, CSRF protection, content security policies, mobile app security, and secure storage patterns
Essential developer skills including Git workflows, SQL optimization, error handling, code review, E2E testing, authentication, debugging, and monorepo management