lepture/flask-wtf — pull request #105 by davidism (2013-12-19 20:39:08+00:00)
Title: find csrf_token field if form has prefix

If a form was initialized as `Form(prefix='hello')`, then the `csrf_token` field will have the name `'hello-csrf_token'`, and CsrfProtect will fail to recognize it.

This change checks all keys to find one that ends with `'csrf_token'`.