chiselwright/plack-middleware-xsrfblock — pull request #14 by mtths (2014-10-08 13:17:05+00:00)
Title: optionally allow signed cookies, escape token injected into html

still needs tests, trying to wrap my head around that now