Flask-WTF Changelog¶
Version 0.14.2¶
Released 2017-01-10
- Fix bug where FlaskFormassumedmetaargument was notNoneif it was passed. (#278)
Version 0.14.1¶
Released 2017-01-10
- Fix bug where the file validators would incorrectly identify an empty file as valid data. (#276, #277) - FileFieldis no longer deprecated. The data is checked during processing and only set if it's a valid file.
- has_fileis deprecated; it's now equivalent to- bool(field.data).
- FileRequiredand- FileAllowedwork with both the Flask-WTF and WTForms- FileFieldclasses.
- The Optionalvalidator now works withFileField.
 
Version 0.14¶
Released 2017-01-06
- Use itsdangerous to sign CSRF tokens and check expiration instead of doing it ourselves. (#264) - All tokens are URL safe, removing the url_safeparameter fromgenerate_csrf. (#206)
- All tokens store a timestamp, which is checked in validate_csrf. Thetime_limitparameter ofgenerate_csrfis removed.
 
- All tokens are URL safe, removing the 
- Remove the - appattribute from- CsrfProtect, use- current_app. (#264)
- CsrfProtectprotects the- DELETEmethod by default. (#264)
- The same CSRF token is generated for the lifetime of a request. It is exposed as - request.csrf_tokenfor use during testing. (#227, #264)
- CsrfProtect.error_handleris deprecated. (#264)
- Use - Form.Metainstead of deprecated- SecureFormfor CSRF (and everything else). (#216, #271)- csrf_enabledparameter is still recognized but deprecated. All other attributes and methods from- SecureFormare removed. (#271)
 
- Provide - WTF_CSRF_FIELD_NAMEto configure the name of the CSRF token. (#271)
- validate_csrfraises- wtforms.ValidationErrorwith specific messages instead of returning- Trueor- False. This breaks anything that was calling the method directly. (#239, #271)- CSRF errors are logged as well as raised. (#239)
 
- CsrfProtectis renamed to- CSRFProtect. A deprecation warning is issued when using the old name.- CsrfErroris renamed to- CSRFErrorwithout deprecation. (#271)
- FileFieldis deprecated because it no longer provides functionality over the provided validators. Use- wtforms.FileFielddirectly. (#272)
Version 0.13.1¶
Released 2016/10/6
Version 0.13¶
Released 2016/09/29
- Formis renamed to- FlaskFormin order to avoid name collision with WTForms's base class. Using- Formwill show a deprecation warning. (#250)
- hidden_tagno longer wraps the hidden inputs in a hidden div. This is valid HTML5 and any modern HTML parser will behave correctly. (#217, #193)
- flask_wtf.html5is deprecated. Import directly from- wtforms.fields.html5. (#251)
- is_submittedis true for- PATCHand- DELETEin addition to- POSTand- PUT. (#187)
- generate_csrftakes a- token_keyparameter to specify the key stored in the session. (#206)
- generate_csrftakes a- url_safeparameter to allow the token to be used in URLs. (#206)
- form.datacan be accessed multiple times without raising an exception. (#248)
- File extension with multiple parts (.tar.gz) can be used in theFileAllowedvalidator. (#201)
Version 0.12¶
Released 2015/07/09
- Abstract protect_csrf() into a separate method
- Update reCAPTCHA configuration
- Fix reCAPTCHA error handle
Version 0.10.3¶
Released 2014/11/16
Version 0.10.1¶
Released 2014/08/26
Version 0.10.0¶
Released 2014/07/16
- Add configuration: WTF_CSRF_METHODS
- Support WTForms 2.0 now
- Fix csrf validation without time limit (time_limit=False)
- CSRF exempt supports blueprint #111.
Version 0.9.5¶
Released 2014/03/21
Version 0.9.4¶
Released 2013/12/20
- Bugfix for csrf module when form has a prefix
- Compatible support for wtforms2
- Remove file API for FileField
Version 0.9.3¶
Released 2013/10/02
Version 0.9.2¶
Released 2013/9/11
Version 0.9.1¶
Released 2013/8/21
This is a patch version for backward compitable for Flask<0.10 #82.
Version 0.9.0¶
Released 2013/8/15
- Add i18n support (issue #65)
- Use default html5 widgets and fields provided by wtforms
- Python 3.3+ support
- Redesign form, replace SessionSecureForm
- CSRF protection solution
- Drop wtforms imports
- Fix recaptcha i18n support
- Fix recaptcha validator for python 3
- More test cases, it's 90%+ coverage now
- Redesign documentation
Version 0.8.4¶
Released 2013/3/28
- Recaptcha Validator now returns provided message (issue #66)
- Minor doc fixes
- Fixed issue with tests barking because of nose/multiprocessing issue.
Version 0.8.3¶
Released 2013/3/13
- Update documentation to indicate pending deprecation of WTForms namespace facade
- PEP8 fixes (issue #64)
- Fix Recaptcha widget (issue #49)
Version 0.8.2 and prior¶
Initial development by Dan Jacob and Ron Duplain. 0.8.2 and prior there was not a change log.