fix: CSRF issue #51

server/src/api/routes/index.js

@@ -9,6 +9,7 @@ import userRouter from './userRouter.js'
 import config from '../../config.js'
 import leaderboardController from '../controllers/leaderboardController.js'
 import csrfProtection from '../../middleware/csrfProtection.js'
+
 const router = Router()
 
 if (!config.isProduction) {

server/src/middleware/csrfProtection.js

@@ -1,4 +1,5 @@
 import csrf from 'csurf'
+
 const CSRF = csrf({ cookie: true })
 function csrfProtection(req, res, next) {
   if (req.method === 'POST') {