Mechanism for plugins to exclude certain paths from CSRF checks

[simonw]

I need this for a plugin I'm building that offers a POST API.

[simonw]

The new skip_if_scope mechanism in asgi-csrf simonw/asgi-csrf#20 is designed to help here.

Now I need to design a plugin hook that allows plugins to have an opinion on whether a specific scope should have CSRF skipped.

[simonw]

Potential hook names:

• skip_csrf(scope, datasette)
• ... I can't think of any other ones I would tolerate to be honest

[simonw]

Documentation: https://docs.datasette.io/en/latest/plugin_hooks.html#skip-csrf-datasette-scope