python auth_error ai_generated true

BadRequest: 400 Bad Request: The CSRF token is missing.

ID: python/flask-csrf-token-missing

Also available as: JSON · Markdown · 中文
80%Fix Rate
84%Confidence
0Evidence
2024-05-12First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
3.x active — — —

Root Cause

Flask-WTF 表单提交时未包含 CSRF 令牌。

generic

中文

Flask-WTF 表单提交时未包含 CSRF 令牌。

Workarounds

  1. 95% success 
    <form method='post'>\n    <input type='hidden' name='csrf_token' value='{{ csrf_token() }}'>\n</form>
  2. 90% success 
    from flask_wtf.csrf import CSRFProtect\ncsrf = CSRFProtect(app)

Dead Ends

Common approaches that don't work:

  1. 90% fail

    降低安全性，易受攻击。

  2. 70% fail

    字段名不匹配，仍会失败。