chore: improve wording

Author: kamilmysliwiec

content/security/csrf.md

@@ -1,6 +1,6 @@
 ### CSRF Protection
 
-Cross-site request forgery (also known as CSRF or XSRF) is a type of malicious exploit of a website where **unauthorized** commands are transmitted from a user that the web application trusts. To mitigate this kind of attack you can use the [csrf-csrf](https://github.com/Psifi-Solutions/csrf-csrf) package.
+Cross-site request forgery (CSRF or XSRF) is a type of attack where **unauthorized** commands are sent from a trusted user to a web application. To help prevent this, you can use the [csrf-csrf](https://github.com/Psifi-Solutions/csrf-csrf) package.
 
 #### Use with Express (default)
 
@@ -10,17 +10,17 @@ Start by installing the required package:
 $ npm i csrf-csrf
 ```
 
-> warning **Warning** As explained in the [`csrf-csrf` docs](https://github.com/Psifi-Solutions/csrf-csrf?tab=readme-ov-file#getting-started), this middleware requires either session middleware or `cookie-parser` to be initialized first. Please see that documentation for further instructions.
+> warning **Warning** As noted in the [csrf-csrf documentation](https://github.com/Psifi-Solutions/csrf-csrf?tab=readme-ov-file#getting-started), this middleware requires session middleware or `cookie-parser` to be initialized beforehand. Please refer to the documentation for further details.
 
-Once the installation is complete, apply the `csrf-csrf` middleware as global middleware.
+Once the installation is complete, register the `csrf-csrf` middleware as global middleware.
 
 ```typescript
 import { doubleCsrf } from 'csrf-csrf';
 // ...
 // somewhere in your initialization file
 const {
-  invalidCsrfTokenError, // This is just for convenience if you plan on making your own middleware.
-  generateToken, // Use this in your routes to provide a CSRF hash + token cookie and token.
+  invalidCsrfTokenError, // This is provided purely for convenience if you plan on creating your own middleware.
+  generateToken, // Use this in your routes to generate and provide a CSRF hash, along with a token cookie and token.
   validateRequest, // Also a convenience if you plan on making your own middleware.
   doubleCsrfProtection, // This is the default CSRF protection middleware.
 } = doubleCsrf(doubleCsrfOptions);