Merge pull request #2324 from overleaf/spd-devcsrf-resurrect

Reinstate /dev/csrf route and add explanatory comment

GitOrigin-RevId: 48fe437040860e974ada4e22409762c74a14d394

services/web/app/src/router.js

@@ -972,9 +972,8 @@ function initialize(webRouter, privateApiRouter, publicApiRouter) {
     res.send('web sharelatex is alive (api)')
   )
 
-  if (['development', 'test'].includes(process.env.NODE_ENV)) {
-    webRouter.get('/dev/csrf', (req, res) => res.send(res.locals.csrfToken))
-  }
+  // used by kubernetes health-check and acceptance tests
+  webRouter.get('/dev/csrf', (req, res) => res.send(res.locals.csrfToken))
 
   publicApiRouter.get('/health_check', HealthCheckController.check)
   privateApiRouter.get('/health_check', HealthCheckController.check)