mirror of
https://github.com/wassname/flask-security.git
synced 2026-07-21 12:30:10 +08:00
Change csrf_enabled parameter in forms to check for incoming JSON data. Fix #63
This commit is contained in:
@@ -42,7 +42,11 @@ def valid_user_email(form, field):
|
||||
|
||||
class Form(BaseForm):
|
||||
def __init__(self, *args, **kwargs):
|
||||
kwargs.setdefault('csrf_enabled', not current_app.testing)
|
||||
if current_app.testing:
|
||||
csrf_enabled = False
|
||||
else:
|
||||
csrf_enabled = request.json is None
|
||||
kwargs.setdefault('csrf_enabled', csrf_enabled)
|
||||
super(Form, self).__init__(*args, **kwargs)
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user