Lazhari · July 26, 2015 04:36
diff --git a/app.js b/app.js
 //Enable Express csrf protection
 app.use(express.csrf());

 app.use(function(req, res, next) { 
    res.locals.csrftoken = req.csrfToken(); 
    next(); 
 }); 
diff --git a/view-exemple.html b/view-exemple.html
 <input type="hidden" name="_csrf" value="{{ csrftoken } }">
	//Enable Express csrf protection
	app.use(express.csrf());

	app.use(function(req, res, next) {
	res.locals.csrftoken = req.csrfToken();
	next();
	});