global: warn about CSRF being disabled by default

inveniosoftware / invenio-rest

REST API support for Invenio.

https://invenio-rest.readthedocs.io

MIT License

2 stars 41 forks source link

global: warn about CSRF being disabled by default #110

Closed slint closed 4 years ago

slint commented 4 years ago

We should issue a Python warning in case the REST_ENABLE_CSRF is set to False (and maybe if not app.debug?). In the next versoin of invenio-rest (v1.4.0) this will be set by default to True.