[Solved] Which of the following is the correct way to enable CSRF protection in a Flask app? — Ans: app = Flask(__name__) app.secret_key = 'secret' csrf = CSRFProtect(app) | Flask

Flask - Security Best Practices

Which of the following is the correct way to enable CSRF protection in a Flask app?

Aapp = Flask(__name__) app.secret_key = 'secret' csrf = CSRFProtect(app)

Bapp = Flask(__name__) csrf = CSRFProtect() app.secret_key = 'secret'

Capp = Flask(__name__) csrf = CSRFProtect(app) app.secret_key = None

Dapp = Flask(__name__) app.secret_key = None csrf = CSRFProtect(app)

Step-by-Step Solution

Solution:

Step 1: Set secret key before CSRFProtect
CSRF protection requires a secret key set on the Flask app for token generation.
Step 2: Initialize CSRFProtect with app
Passing the app instance to CSRFProtect enables protection on the app.
Final Answer:
app = Flask(__name__) app.secret_key = 'secret' csrf = CSRFProtect(app) -> Option A
Quick Check:
Secret key set + CSRFProtect(app) = correct setup [OK]

Quick Trick: Set secret_key before CSRFProtect(app) call [OK]

Common Mistakes:

MISTAKES

Master "Security Best Practices" in Flask

9 interactive learning modes - each teaches the same concept differently

More Flask Quizzes

Which of the following is the correct way to enable CSRF protection in a Flask app?