rduplain/flask-wtf — Issue #6: CSRF seems broken with encapsulated form (FormField)
Author: rduplain
Created: 2012-02-29 16:44:50+00:00
State: open
Labels: bug, import

It seems multiple csrf tokens are generated when using a FormField to encapsulate one form with in another. I think the csrf token should only be inserted into the top level form, the encapsulated form should be ignored. But that might not be easy since the inner form looks like any other to Flask-WTF.

Maybe I missed something obvious or perhaps this is just a documentation issue.

To get around this, I imported BaseForm from flaskext.wtf and used that base class for the inner form... maybe there is a better way.

---------------------------------------
- Bitbucket: https://bitbucket.org/danjac/flask-wtf/issue/6
- Originally Reported By: Anonymous
- Originally Created At: 2010-11-06 23:54:30