From 489be7600ceee78706199738c3d3b07bd498638f Mon Sep 17 00:00:00 2001
From: Oleg Baturin <baturin@gmail.com>
Date: Fri, 8 Nov 2024 20:07:57 +0700
Subject: [PATCH] add csrf potection by header to the list of features

---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index 83d4e78..5ed1e73 100644
--- a/README.md
+++ b/README.md
@@ -20,6 +20,7 @@ The package provides [PSR-15](https://www.php-fig.org/psr/psr-15/) middleware fo
   - Synchronizer CSRF token with customizable token generation and storage. By default, it uses random data and session.
   - HMAC based token with customizable identity generation. Uses session by default.
 - It has ability to apply masking to CSRF token string to make [BREACH attack](https://breachattack.com/) impossible.
+- It supports CSRF protection by custom header for AJAX/SPA backend API.
 
 ## Requirements