feat(api): 新增 CSRF 校验

applications/view/system/dict.py

@@ -1,4 +1,6 @@
 from flask import Blueprint, render_template, request, jsonify
+from flask_wtf.csrf import validate_csrf
+from wtforms.validators import ValidationError
 
 from applications.common import curd
 from applications.common.helper import ModelFilter
@@ -49,7 +51,10 @@ def dict_type_add():
 @authorize("system:dict:add", log=True)
 def dict_type_save():
     req_json = request.get_json(force=True)
-
+    try:
+        validate_csrf(req_json.get("csrf_token"))
+    except ValidationError:
+        return fail_api(msg='非法请求')
     data = {
         'type_name': str_escape(req_json.get("typeName")),
         'type_code': str_escape(req_json.get("typeCode")),
@@ -180,6 +185,7 @@ def dict_data_add():
 def dict_data_save():
     req_json = request.get_json(force=True)
 
+
     data_label = str_escape(req_json.get("dataLabel"))
     data_value = str_escape(req_json.get("dataValue"))
     enable = str_escape(req_json.get("enable"))