import os
from flask import Flask, render_template, request from flask_dropzone import Dropzone from flask_wtf.csrf import CSRFProtect, CSRFError
basedir = os.path.abspath(os.path.dirname(file))
app = Flask(name)
app.config.update( SECRET_KEY='dev key', # the secret key used to generate CSRF token UPLOADED_PATH=os.path.join(basedir, 'uploads'), # Flask-Dropzone config: DROPZONE_ALLOWED_FILE_TYPE='image', DROPZONE_MAX_FILE_SIZE=3, DROPZONE_MAX_FILES=30, DROPZONE_ENABLE_CSRF=True # enable CSRF protection )
dropzone = Dropzone(app) csrf = CSRFProtect(app) # initialize CSRFProtect
@app.route('/', methods=['POST', 'GET']) def upload(): if request.method == 'POST': f = request.files.get('file') f.save(os.path.join(app.config['UPLOADED_PATH'], f.filename)) return render_template('index.html')
handle CSRF error
@app.errorhandler(CSRFError) def csrf_error(e): return e.description, 400
if name == 'main': app.run(debug=True)
index.html
<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <title>Flask-Dropzone Demo: CSRF</title> {{ dropzone.load_css() }} {{ dropzone.style('border: 2px dashed #0087F7; margin: 10%; min-height: 400px;') }} </head> <body> {{ dropzone.create('upload') }} {{ dropzone.load_js() }} {{ dropzone.config() }} </body> </html>
