feat(api): 新增 CSRF 校验

2025-09-02 11:37:27 +08:00
parent 000330dbd7
commit 5bcc28a492
5 changed files with 20 additions and 2 deletions
@@ -1,5 +1,6 @@
 from flask import session, current_app
 from flask_login import current_user
+from flask_wtf.csrf import generate_csrf


 def init_template_directives(app):
@@ -9,3 +10,8 @@ def init_template_directives(app):
            return bool(power in session.get('permissions'))
        else:
            return True
+
+    @app.template_global()
+    def csrf_input():
+        return f'<input type="hidden" name="csrf_token" value="{generate_csrf()}">'
+