mirror of
https://github.com/wassname/flask-security.git
synced 2026-09-25 13:40:46 +08:00
The login form was not respecting csrf validation. I've adjusted the tests as well to always send a CSRF token along. This now requires all requests to pass a csrf token. If performing plain AJAX requests the token will have to be extracted from the form in some way. Fixes #86