Best Practices for Security

Is there a security guide for best practices around dealing with items such as CSRF? If not, what would be the recommended way to deal with CSRF in an Ember App?