CsrfOptions

import type { CsrfOptions } from "@shadow-js/dusk/server";

interface CsrfOptions {
  /** Origins (besides the request's own) allowed to send state-changing requests. */
  readonly trustedOrigins?: readonly string[];
  /**
   * Accept state-changing requests that carry no `Sec-Fetch-Site`, `Origin` or `Referer`
   * (command-line clients). Default `false`: such requests are rejected.
   */
  readonly allowMissingOrigin?: boolean;
}