Using CORS policies to implement CSRF protection | Mixmax

June 13, 2017 Using CORS policies to implement CSRF protection This post is a follow-on to our CORS post back in December. We'll describe how traditional CORS policies aren't sufficient defense against cross-site request forgery (CSRF) attacks, and unveil a new Node module that layers CSRF protection on top of such policies, cors-gate. We'll show how an Origin-based approach has fewer moving parts