csrf-monkey
Automatically add CSRF headers to all clientside requests
Automatically add CSRF headers to all clientside requests
HTTP and Express middleware that compares the request's Origin header with a list of allowed origins, to protect against CSRF.