Skip to content

v2.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Feb 14:58
· 6 commits to main since this release
v2.0.0
This tag was signed with the committer’s verified signature.
frankie567 François Voron
GPG key ID: ACC9784053EA63DC
Verified
Learn about vigilant mode.
3b42fd6
This commit was signed with the committer’s verified signature.
frankie567 François Voron
GPG key ID: ACC9784053EA63DC
Verified
Learn about vigilant mode.

Bump version 1.4.5 → 2.0.0

Breaking changes

  • Initializer arguments other than app and secret are now keyword-only.
    • This shouldn't affect you if you add the middleware normally using Starlette's Middleware or FastAPI's .add_middleware.

New features

  • Add a required_urls argument to set route patterns where CSRF should always be enforced, no matter the method or cookies present.
    • Useful to prevent attacks like Login CSRF.
    • Thanks @bkis for the idea and feedback

Contributors

bkis
Assets 4
Loading