diff --git a/CODEOWNERS b/CODEOWNERS
index 0f81b447d285..4916bead4c8d 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -2,8 +2,10 @@
 # By default, @envoyproxy/maintainers own everything.
 #*       @envoyproxy/maintainers
 
+# csrf extension
+/*/extensions/filters/http/csrf @dschaller @mattklein123
 # dubbo_proxy extension
-/*/extensions/filters/network/dubbo_proxy @zyfjeff @lizan 
+/*/extensions/filters/network/dubbo_proxy @zyfjeff @lizan
 # thrift_proxy extension
 /*/extensions/filters/network/thrift_proxy @zuercher @brian-pane
 # jwt_authn http filter extension