orbit-oss/flask
4
5
Fork 2
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add built-in CSRF protection using Sec-Fetch-Site header

Browse source
This commit is contained in:
Sharoon Thomas 2025-12-17 02:44:19 +00:00
parent 2579ce9f18
commit 54aaa01eb5
7 changed files with 525 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

3
CHANGES.rst
View file

@ -3,6 +3,9 @@ Version 3.2.0
Unreleased
- Add built-in CSRF protection using ``Sec-Fetch-Site`` header with
``Origin`` fallback. Controlled by ``CSRF_PROTECTION`` config and
``csrf_protection`` route parameter. :issue:`5863`
- Drop support for Python 3.9. :pr:`5730`
- Remove previously deprecated code: ``__version__``. :pr:`5648`
- ``RequestContext`` has merged with ``AppContext``. ``RequestContext`` is now