Original content can be found at https://github.com/pillarjs/understanding-csrf. I think that this might be a good fit for a page or blog post. WDYT? Note that [csurf](https://github.com/expressjs/csurf) was deprecated but [csrf](https://github.com/pillarjs/csrf) is maintained so the content is relevant 🤔