add exempt url prefix support

maxcountryman / flask-seasurf

SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).

http://readthedocs.org/docs/flask-seasurf/

Other

190 stars 49 forks source link

add exempt url prefix support #47

Closed killpanda closed 9 years ago

killpanda commented 9 years ago

In current version, only views could be exempted from CSRF check. It seems not that convenient sometimes since users have to put csrf.exempt to each views.

I just added a new method to allow users to exempt from CSRF check based on url rules.

maxcountryman commented 9 years ago

Do you mind squashing the second commit into the first? Then I think we should merge this. :)

killpanda commented 9 years ago

All done. Thanks so much. I am so excited. :)

killpanda commented 9 years ago

Could you publish a new version?

maxcountryman commented 9 years ago

@killpanda I'll try to remember to do that this weekend.

milas commented 9 years ago

Would definitely appreciate a new version being published with these changes! (This PR also restores compatibility with Python 2.6.)

maxcountryman commented 9 years ago

@milas 0.2.1 is on PyPI.

killpanda commented 9 years ago

Good to see! Many thanks!