Místa: Formulář pro hledání používá GET

mo/web/org_place.py

@@ -23,7 +23,7 @@ class PlaceSearchForm(FlaskForm):
     submit = wtforms.SubmitField('Hledat')
 
 
-@app.route('/org/place/<int:id>/', methods=('GET', 'POST'))
+@app.route('/org/place/<int:id>/')
 def org_place(id: int):
     sess = db.get_session()
 
@@ -31,11 +31,12 @@ def org_place(id: int):
     if not place:
         raise werkzeug.exceptions.NotFound()
 
-    search_form = PlaceSearchForm()
+    # Formulář nemá side-efekty, takže to může být GET bez CSRF.
+    search_form = PlaceSearchForm(request.args, meta={'csrf': False})
     found_places = None
     search_failed = False
     search_limited = False
-    if search_form.validate_on_submit():
+    if 'submit' in request.args and search_form.validate():
         query = search_form.query.data
         query_words = query.split()
 

mo/web/templates/org_place.html

@@ -50,7 +50,7 @@
 </div>
 {% endif %}
 
-{{ wtf.quick_form(search_form, form_type='inline', button_map={'submit': 'primary'}) }}
+{{ wtf.quick_form(search_form, method='GET', form_type='inline', button_map={'submit': 'primary'}) }}
 
 {% if found_places %}
 	<table class=data>