deps: csurf package is deprecated and should be replaced

[pano9000]

Description

Hi,

currently the csurf package is used to implement some CSRF protection – unfortunately the package seems to have a couple of issues and got marked as "deprecated":
https://www.npmjs.com/package/csurf

Some additional reading about it:
https://dev-academy.com/csurf-vulnerability/

A viable solution could be to use the following package as replacement:
https://github.com/Psifi-Solutions/csrf-csrf

It is not a 1:1 drop-in replacement (e.g. it seems to need some slightly different configurations), but it should work similarly enough afterwards, from what I saw

TriliumNext Version

git

What operating system are you using?

Other Linux

What is your setup?

Local + server sync

Operating System Version

git

Error logs

No response