aboutsummaryrefslogtreecommitdiffstats
path: root/pysite/route_manager.py
diff options
context:
space:
mode:
authorGravatar Gareth Coles <[email protected]>2018-04-03 22:44:57 +0100
committerGravatar Gareth Coles <[email protected]>2018-04-03 22:44:57 +0100
commit946eb73bfda20ea54b6cac8c99014d0410d1d470 (patch)
tree5bd3cf6f23c09baa1d71729141cdb30f128ff63b /pysite/route_manager.py
parentExplicitly exclude the API subdomain from CSRF checks (diff)
Forget about CSRF, will fix tomorrow
Diffstat (limited to 'pysite/route_manager.py')
-rw-r--r--pysite/route_manager.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/pysite/route_manager.py b/pysite/route_manager.py
index 03587fb0..ee86c531 100644
--- a/pysite/route_manager.py
+++ b/pysite/route_manager.py
@@ -84,7 +84,7 @@ class RouteManager:
self.app.before_request(self.https_fixing_hook) # Try to fix HTTPS issues
- CSRF.init_app(self.app) # Set up CSRF protection
+ # CSRF.init_app(self.app) # Set up CSRF protection
self.app.config["WTF_CSRF_CHECK_DEFAULT "] = False # We only want to protect specific routes
def https_fixing_hook(self):