lepture/flask-wtf — pull request #139 by devin60070 (2014-07-23 22:17:28+00:00)
Title: Update csrf.rst

Make sure to never send the CSRF token to other domains. crossDomain is in jQuery 1.5.1+