Merge pull request github#5977 from security-prince/patch-1

Adding reference link for csurf

Author: erik-krogh

javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.qhelp

@@ -58,5 +58,6 @@
 
 <references>
 	<li>OWASP: <a href="https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)">Cross-Site Request Forgery (CSRF)</a></li>
+	<li>NPM: <a href="https://www.npmjs.com/package/csurf">csurf</a></li>
 </references>
 </qhelp>