flask-csrf

Quick, easy CSRF protection for your Flask applications.

See the documentation for more information.

Why the fork?

1. Protects PUT and DELETE methods too, not just POST. To help with this, _ct can be present on the query string too, not just in a form field.
2. Enables non-standard workflows by storing a single CSRF token in the session and re-using it for every form.