Python Flask CSRF Protection and Attack Demo

The core concept is verifying that the post requests for state changing routes contain a server generated token as proof that the request was not forged.

pip install --user Flask-WTF https://flask-wtf.readthedocs.io/en/1.0.x/ ... https://www.youtube.com/watch?v=IkzdjP9wWas