4 ms·AFAIK, the Flask-WTF extension for Flask does CSFRF for forms. Flask also protects from XSS per default.by mercurial 13y agoAFAIK, the Flask-WTF extension for Flask does CSFRF for forms. Flask also protects from XSS per default.