I've released Ring-Anti-Forgery 1.4.0, a #clojure library for CSRF prevention. The new version has less dependencies and a new :safe-header option.

https://github.com/ring-clojure/ring-anti-forgery/