flask-csrf

flask-csrf copied to clipboard

The module `werkzeug.routing` got refactored in werkzeug 2.2.0 and `NotFound` is no longer exported here.

mrphlip

We are using flask-csrf for our Rest API which serves a single-page-application. This means almost all our routes are csrf-protected and the few which are not are handled using `csrf_exempt`....

Sgoettschkes

not thread safe if a single python interpreter is servicing multiple apps

2

this is due to csrf._exempt_views being module (global) state. one app could exempt a view that collides with an nonexempt view of the same name of another app, thereby exempting...

razamatan