Document webapp2_extras/xsrf.py

[mnieper]

The module webapp2_extras.xsrf is not included in webapp2's official documentation. Making it more prominent could help to discourage people from publishing web applications without XSRF protection.

[theacodes]

Thanks for reporting, @mnieper. This project is community-maintained. You're welcome to send a PR to add these docs. :)

[mnieper]

Thanks for the quick reply, @jonparrott. I am thinking of making a PR (not today or tomorrow, though).

P.S.: When will webapp2 reach version 3.0.0? Looking forward to seeing the new version included in the app engine runtime (which offers no more than 2.5.2).

[theacodes]

P.S.: When will webapp2 reach version 3.0.0?

Whenever someone creates a PR to make it so.

Looking forward to seeing the new version included in the app engine runtime (which offers no more than 2.5.2).

It's unlikely that app engine will ever update its bundled version. It's likely you'll just need to vender this just like any other third-party library.