An unofficial csrf protection for express.js<br> **Simple** but **strong**<br> You can use both **Esm** and **Cjs**