datasette PR #2689: Replace token-based CSRF with Sec-Fetch-Site header protection

📰 Simon Willison's Blog

datasette PR #2689: Replace token-based CSRF with Sec-Fetch-Site header protection Datasette has long protected against CSRF attacks using CSRF tokens, implemented using my asgi-csrf Python library. These are something of a pain to work with - you need to scatter forms in templates with

Published 14 Apr 2026
Read full article → ← Back to Reads