feat(common): on-by-default XSRF support in HttpClient (#18108)

Fixes #18100

tools/public_api_guard/common/http.d.ts

@@ -1246,6 +1246,20 @@ export declare class HttpXhrBackend implements HttpBackend {
     handle(req: HttpRequest<any>): Observable<HttpEvent<any>>;
 }
 
+/** @experimental */
+export declare class HttpXsrfModule {
+    static disable(): ModuleWithProviders;
+    static withOptions(options?: {
+        cookieName?: string;
+        headerName?: string;
+    }): ModuleWithProviders;
+}
+
+/** @experimental */
+export declare abstract class HttpXsrfTokenExtractor {
+    abstract getToken(): string | null;
+}
+
 /** @experimental */
 export declare class JsonpClientBackend implements HttpBackend {
     constructor(callbackMap: JsonpCallbackContext, document: any);