mirror of
https://github.com/wassname/flask-security.git
synced 2026-06-27 16:10:11 +08:00
34b3bf9e80
The login form was not respecting csrf validation. I've adjusted the tests as well to always send a CSRF token along. This now requires all requests to pass a csrf token. If performing plain AJAX requests the token will have to be extracted from the form in some way. Fixes #86