next-csrf icon indicating copy to clipboard operation
next-csrf copied to clipboard

CSRF mitigation for Next.js

Results 33 next-csrf issues
Sort by recently updated
recently updated
newest added

In the server side, if you read the CSRF token value from cookie and do the validation, I don't think it protects you from CSRF attacks. Let's say, on **attacker's...

bug

Hello, i'm trying to get the `query` from the `context` argument of `getServerSideProps`. But i can't achieve this if i follow the example you provided. ```ts export const getServerSideProps =...

Bumps [jsdom](https://github.com/jsdom/jsdom) from 16.4.0 to 16.7.0. Release notes Sourced from jsdom's releases. Version 16.7.0 Added AbortSignal.abort(). (ninevra) Added dummy x and y properties to the return value of getBoundingClientRect(). (eiko)...

dependencies

Bumps [next](https://github.com/vercel/next.js) from 9.5.5 to 12.1.0. Release notes Sourced from next's releases. v12.1.0 Core Changes Relay Support in Rust Compiler: #33702 fix eslint link-passhref rule: #33857 update webpack: #33831 Flush...

dependencies

Bumps [next](https://github.com/vercel/next.js) from 9.5.3 to 12.1.0. Release notes Sourced from next's releases. v12.1.0 Core Changes Relay Support in Rust Compiler: #33702 fix eslint link-passhref rule: #33857 update webpack: #33831 Flush...

dependencies

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependencies

Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2. Changelog Sourced from ssri's changelog. 6.0.2 (2021-04-07) Bug Fixes backport regex change from 8.0.1 (b30dfdb), closes #19 Commits b7c8c7c chore(release): 6.0.2 b30dfdb fix: backport...

dependencies

Bumps [ansi-regex](https://github.com/chalk/ansi-regex) from 5.0.0 to 5.0.1. Release notes Sourced from ansi-regex's releases. v5.0.1 Fixes (backport of 6.0.1 to v5) This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1,...

dependencies