I want to update the CSRF library for Express and perhaps make a universal solution for folks.

[CosmosisT]

How would I go about this with the staff, I got examples and proof of concept that works. Concept is stateless and can use as many factors from IP, user-agent,etc,etc to confirm sessions/etc. Easy to use and won't impose a security threat and scales via secret code.

[pauldwaite]

I think the discussion on CSRF is consolidated here: #5491