Harness-engineering owasp-csrf-protection

name: owasp-csrf-protection version: "1.0.0" description: Defend state-changing endpoints with CSRF tokens, SameSite cookies, and origin validation stability: static cognitive_mode: advisory-guide type: knowledge tier: 3 triggers:

• manual platforms:
• claude-code
• gemini-cli
• cursor
• codex tools: [] paths:
• "/auth/"
• "/security/"
• "/middleware/"
• "/guards/" related_skills:
• owasp-auth-patterns
• owasp-security-headers
• nestjs-guards-pattern
• security-session-management
• security-threat-modeling-stride stack_signals:
• nodejs
• typescript
• security keywords:
• csrf
• cross-site-request-forgery
• samesite
• csrf-tokens
• double-submit-cookie
• origin-validation
• owasp metadata: author: community upstream: "owasp.org/www-project-top-ten/" state: persistent: false files: [] depends_on: []