csrf

CSRF-protection for authentication cookies. When enabled, this plugin makes sure the "SameSite" flag is set in authentication cookies.

Prevent Cross-Site Request Forgery attacks on your comments form.

Headit is a simple plugin to allow you to add custom HTTP response headers to your site.