cors-csrf-defense

Cross-Origin Resource Sharing (CORS) whitelisting, preflight caching, and anti-CSRF token verification.

SKILL.md

GitHub

CORS & CSRF Defense Protocol

  1. Never use Access-Control-Allow-Origin: * with credentials.
  2. Whitelist explicit origin domains dynamically.
  3. Require custom headers (e.g. X-Requested-With) on state-changing API mutations.

Похожие навыки: other

limits-colimits

Context management for Claude Code. Hooks maintain state via ledgers and handoffs. MCP execution without context polluti...

Автор: parcadei
3,392

ddttom-allaboutv2-claude-skills-block-collection-and-party

The Block Collection and Block Party are repositories for existing AEM blocks, build tools, code snippets, integration p...

Автор: mattnigh
20

nodnarbnitram-claude-code-extensions-claude-skills-esphome-confi

This skill should be used when the user asks to "create an esphome config", "set up an esp32 device", "configure esphome...

Автор: mattnigh
20