https://github.com/maxcountryman/flask-seasurf

SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).
https://github.com/maxcountryman/flask-seasurf

Last synced: 4 days ago
JSON representation

SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).

• Host: GitHub
• URL: https://github.com/maxcountryman/flask-seasurf
• Owner: maxcountryman
• License: other
• Created: 2011-12-06T18:51:00.000Z (about 13 years ago)
• Default Branch: main
• Last Pushed: 2024-07-29T14:04:48.000Z (6 months ago)
• Last Synced: 2024-10-30T01:37:44.798Z (3 months ago)
• Language: Python
• Homepage: http://readthedocs.org/docs/flask-seasurf/
• Size: 1.15 MB
• Stars: 190
• Watchers: 8
• Forks: 49
• Open Issues: 14
• Metadata Files:
  • Readme: README.markdown
  • License: LICENSE

Awesome Lists containing this project

• awesome-flask - Flask-SeaSurf - Cross-site request forgery (CSRF) prevention. (Third-Party Extensions / Security)
• jimsghstars - maxcountryman/flask-seasurf - SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF). (Python)

README

        
[![Tests](https://img.shields.io/github/actions/workflow/status/maxcountryman/flask-seasurf/tests.yml?branch=main)](https://github.com/maxcountryman/flask-seasurf/actions)

[![Version](https://img.shields.io/pypi/v/Flask-SeaSurf.svg)](https://pypi.python.org/pypi/Flask-SeaSurf)

[![Supported Python Versions](https://img.shields.io/pypi/pyversions/Flask-SeaSurf.svg)](https://pypi.python.org/pypi/Flask-SeaSurf)

# Flask-SeaSurf

SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).

CSRF vulnerabilities have been found in large and popular sites such as

YouTube. These attacks are problematic because the mechanism they use is

relatively easy to exploit. This extension attempts to aid you in securing

your application from such attacks.

This extension is based on the excellent Django middleware.

## Installation

Install the extension with one of the following commands:

    $ easy_install flask-seasurf

or alternatively if you have pip installed:

    $ pip install flask-seasurf

## Usage

Using SeaSurf is fairly straightforward. Begin by importing the extension and

then passing your application object back to the extension, like this:

    from flask_seasurf import SeaSurf

    csrf = SeaSurf(app)

## Documentation

The Sphinx-compiled documentation is available here: https://flask-seasurf.readthedocs.io/