aramrami/OWASP-CSRFGuard — pull request #8 by mathiasbynens (2014-04-24 07:06:31+00:00)
Title: Don’t extend/override `String.prototype`

By using private functions instead, security issues with hacky workarounds like https://github.com/esheri3/OWASP-CSRFGuard/pull/52 are avoided. It also ensures that other scripts that rely on the native ES6 `String.prototype.{starts,ends}With` behavior won’t break the moment someone adds CSRFGuard to the page.