Prevention of CSRF attacks. Module intended to be used with express.js

CSRFPrevent.js

const url = require('url')

module.exports = (request,domainName) => {
	console.log(request.headers)
	if (request.headers.referer) {
		const parsedURL = url.parse(request.headers.referer)
		return parsedURL.hostname === domainName ||
			parsedURL.hostname === '127.0.0.1' || 
			parsedURL.hostname === 'localhost'
	}
	if (request.headers.origin) {
		const parsedURL = url.parse(request.headers.origin)
		return parsedURL.hostname === domainName ||
			parsedURL.hostname === '127.0.0.1' || 
			parsedURL.hostname === 'localhost'
	}
	return true
}