Bjoern Welker
e062a1e836
- Add Flask-WTF dependency for CSRF protection - Initialize CSRFProtect in app.py - Add CSRF tokens to all POST forms in templates - Exempt /order JSON API endpoint (uses API key instead) This protects against Cross-Site Request Forgery attacks on all admin and user management operations. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
5 lines
63 B
Plaintext
Executable File
5 lines
63 B
Plaintext
Executable File
Flask>=3.0.0
|
|
Flask-WTF>=1.2.0
|
|
Werkzeug>=3.0.0
|
|
gunicorn>=21.0.0
|