datasette PR #2689: Replace token-based CSRF with Sec-Fetch-Site header protection
datasette PR #2689: Replace token-based CSRF with Sec-Fetch-Site header protection
Datasette has long protected against CSRF attacks using CSRF tokens, implemented using my asgi-csrf Python library. These are something of a pain to work with – yo…