Skip to content

Issues: krakenjs/lusca

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

33 Open 37 Closed
33 Open 37 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Setting CSRF token on the blacklisted routes.
#142 opened Oct 2, 2020 by ohpyupi
lusca.xframe value - "ALLOW-FROM uri" is obselete
#141 opened Jul 23, 2020 by kruthivijay31
Cookie “XSRF-TOKEN” will be soon rejected
#139 opened May 16, 2020 by miclill
1
Change CSRF-Token name
#138 opened Apr 3, 2020 by molerat619
CSP policy is wrong when whitespace is missing before 'self'
#137 opened Nov 23, 2019 by danielcl
Nonce is not being generated
#136 opened Nov 23, 2019 by danielcl
2
How skip api css js avoid redundant？
#134 opened Oct 8, 2019 by lichspace
lusca requires req.session
#133 opened Sep 16, 2019 by matharuajay
DNS Rebinding protection
#131 opened Oct 25, 2018 by brannondorsey
X-XSS-Protection report uri
#124 opened May 21, 2018 by theel0ja
1
Support CSRF black/white listing on URL params
#123 opened May 16, 2018 by mjy78
2
CSRF error status code
#116 opened Oct 31, 2017 by zisiszikos
3
DDOS - does lusca contains protection from ddos attacks question
#115 opened Oct 3, 2017 by maxprog
2
CSRF: Move from 10 Bytes to 9 or 12.
#109 opened Aug 7, 2017 by jagracey
Are resave and saveUninitialized options for sessions required?
#106 opened Jul 7, 2017 by sbking
Warning that a promise was created in a handler but not returned from it
#101 opened Mar 25, 2017 by nstuyvesant
How to get XSRF token before first post request
#95 opened Oct 24, 2016 by ghost
5
socket.io Content-Security-Policy Host
#90 opened Jul 27, 2016 by theage
3
Lusca and nginx best practices
#89 opened Jul 23, 2016 by titoesteves
3
Basic Security with Node, Express and Lusca
#88 opened May 30, 2016 by ghost
1
Secure csrf
#78 opened Mar 25, 2016 by mrazvan21
6
how to submit a (enctype="multipart/form-data") form with csrf
#74 opened Jan 25, 2016 by nguowk
use postman in chrome found error : CSRF token missing
#73 opened Nov 25, 2015 by simdm
12
Invalidate CSRF token
#68 opened Oct 9, 2015 by kumarmugu
7
CSRF Hooks
#63 opened Aug 13, 2015 by uptownhr
1
ProTip! Adding no:label will show everything without a label.