Issues

• [BUG] Support "null" value for Origin header

  bug
  gorilla/csrf#205 · Filter by author raulci opened on Dec 1, 2025

• Fix for this CVE-2025-47909 is required

  bug
  gorilla/csrf#204 · Filter by author satishrayavarapu-cmd opened on Oct 22, 2025
  8

• [FEATURE] Make csrf and gorilla/schema compatible with each other without additional config

  bug
  gorilla/csrf#203 · Filter by author a-h opened on Aug 9, 2025

• [BUG] Discrepancy between security reports?

  bug
  gorilla/csrf#202 · Filter by author fragglet opened on Jul 28, 2025
  1

• Security Flaw in encrypt and decrypt: In-place XOR Alters Input Data

  bug
  gorilla/csrf#201 · Filter by author Imran-imtiaz48 opened on Jul 5, 2025

• [BUG] origin invalid when comparing allowed origins

  bug
  gorilla/csrf#192 · Filter by author clD11 opened on May 30, 2025

• [BUG] Forbidden - Invalid Origin in localhost

  bug
  gorilla/csrf#190 · Filter by author shamilovstas opened on May 14, 2025
  9

• [BUG] unlogical forbidden error

  bug
  gorilla/csrf#189 · Filter by author Z3NTL3 opened on May 12, 2025
  1

• [BUG] v.1.7.3 sameOrigin check issue for localhost over http

  bug
  gorilla/csrf#188 · Filter by author eugenioenko opened on Apr 22, 2025
  5

• [BUG] v1.7.3 breaks reverse proxies that change Host

  bug
  gorilla/csrf#187 · Filter by author FiloSottile opened on Apr 18, 2025

• [BUG] v1.7.3 is technically a breaking change

  bug
  gorilla/csrf#186 · Filter by author FiloSottile opened on Apr 18, 2025
  2

• [BUG] <title>

  bug
  gorilla/csrf#185 · Filter by author 715kg opened on Apr 16, 2025

• [BUG] TestGenerateRandomBytes panics

  bug
  gorilla/csrf#183 · Filter by author NightTsarina opened on Mar 7, 2025

• [FEATURE] Expose token validation function to allow for custom implementations

  gorilla/csrf#181 · Filter by author amorey opened on Dec 11, 2024

• [FEATURE] CSRF Token Encoding and Decoding in Base64 URI Safe Format

  gorilla/csrf#179 · Filter by author Sang-Hyuk opened on Dec 6, 2024

• [FEATURE] Custom TrustedOrigin matcher

  gorilla/csrf#178 · Filter by author cody-dot-js opened on Aug 14, 2024

• Clarification Needed on TrustedOrigins Variable Usage

  bug
  gorilla/csrf#177 · Filter by author kokoichi206 opened on Jul 27, 2024
  1

• First request to protected endpoint fails, CSRF header is empty

  bug
  gorilla/csrf#174 · Filter by author nate-anderson opened on Jan 22, 2024

• [BUG] Middleware doesn't work with Chi

  bug
  gorilla/csrf#173 · Filter by author romanian-bag-void opened on Nov 30, 2023
  1

• Forbidden - CSRF token invalid

  bug
  gorilla/csrf#172 · Filter by author kek-wait-w opened on Nov 6, 2023

• [bug] Generate CSRF tokens for skipped requests

  bug
  gorilla/csrf#163 · Filter by author Airblader opened on Sep 6, 2022