esheri3/OWASP-CSRFGuard — pull request #63 by mathiasbynens (2014-04-24 07:01:27+00:00)
Title: Don’t extend `String.prototype`

By using private functions instead, security issues with hacky workarounds like #52 are avoided. It also ensures that other scripts that rely on the native ES6 `String.prototype.{starts,ends}With` behavior won’t break the moment someone adds CSRFGuard to the page.