const express = require('express'); const app = express(); //first you need to install csurf from npm const csrfProtection = require('csurf'); app.use(csrfProtection());