mirror of
https://github.com/wassname/flask-security.git
synced 2026-08-13 12:10:09 +08:00
The login form was not respecting csrf validation. I've adjusted the tests as well to always send a CSRF token along. This now requires all requests to pass a csrf token. If performing plain AJAX requests the token will have to be extracted from the form in some way. Fixes #86