diff options
| -rw-r--r-- | app_test.py | 2 | ||||
| -rw-r--r-- | pysite/route_manager.py | 6 |
2 files changed, 7 insertions, 1 deletions
diff --git a/app_test.py b/app_test.py index a6fcbe0d..5747dbd6 100644 --- a/app_test.py +++ b/app_test.py @@ -12,6 +12,8 @@ manager.load_views(manager.app.tests_blueprint, "pysite/views/tests") manager.app.register_blueprint(manager.app.tests_blueprint) app = manager.app +app.config["WTF_CSRF_CHECK_DEFAULT"] = False + class SiteTest(TestCase): """ Extend TestCase with flask app instantiation """ diff --git a/pysite/route_manager.py b/pysite/route_manager.py index ec0a84e3..6354f242 100644 --- a/pysite/route_manager.py +++ b/pysite/route_manager.py @@ -34,7 +34,6 @@ class RouteManager: self.app.secret_key = os.environ.get("WEBPAGE_SECRET_KEY", "super_secret") self.app.config["SERVER_NAME"] = os.environ.get("SERVER_NAME", "pythondiscord.local:8080") self.app.config["PREFERRED_URL_SCHEME"] = PREFERRED_URL_SCHEME - self.app.config["WTF_CSRF_CHECK_DEFAULT "] = False # We only want to protect specific routes self.app.before_request(self.db.before_request) self.app.teardown_request(self.db.teardown_request) @@ -73,6 +72,9 @@ class RouteManager: except Exception: logging.getLogger(__name__).exception(f"Failed to register blueprint for subdomain: {sub}") + # if sub == "api": + # CSRF.exempt(sub_blueprint) + # Load the websockets self.ws_blueprint = Blueprint("ws", __name__) @@ -81,7 +83,9 @@ class RouteManager: self.sockets.register_blueprint(self.ws_blueprint, url_prefix="/ws") self.app.before_request(self.https_fixing_hook) # Try to fix HTTPS issues + CSRF.init_app(self.app) # Set up CSRF protection + self.app.config["WTF_CSRF_CHECK_DEFAULT "] = False # We only want to protect specific routes def https_fixing_hook(self): """ |