Why this matters
Disabling CSRF protection allows malicious sites to execute unauthorized actions on behalf of authenticated users. Always enforce CSRF protection.
Ensure that CSRF protection is enforced. Disabling CSRF protection allows malicious sites to execute unauthorized actions on behalf of authenticated users.
Disabling CSRF protection allows malicious sites to execute unauthorized actions on behalf of authenticated users. Always enforce CSRF protection.
Side-by-side examples engineers can pattern-match during review.
new ApolloServer({
csrfPrevention: false,
});new ApolloServer({
csrfPrevention: true,
});new ApolloServer({
csrfPrevention: false,
});new ApolloServer({
csrfPrevention: true,
});From the same buckets as this rule.