CSRF middleware factory.
Accepts the exact Origin sentinel null when Fetch Metadata reports same-origin, including navigation POSTs under the default no-referrer policy, unless CsrfOptions.acceptNullOriginSameOrigin is false.
null
same-origin
CsrfOptions.acceptNullOriginSameOrigin
false
CSRF configuration
A middleware function implementing CSRF protection
When acceptNullOriginSameOrigin is not a boolean
acceptNullOriginSameOrigin
CSRF middleware factory.
Accepts the exact Origin sentinel
nullwhen Fetch Metadata reportssame-origin, including navigation POSTs under the default no-referrer policy, unlessCsrfOptions.acceptNullOriginSameOriginisfalse.