WTForms provides form validation for Flask / Django-style apps. Form().validate_on_submit() is a sanitizer for field-level validation. Still, string field values reach templates / SQL if fed directly without additional escaping.
.Form.validate()SanitizerForm.validate() -> bool
Validates all fields. Sanitizer for shape / type; strings remain tainted.
return.Form()Neutralwtforms.Form(formdata=None, obj=None, prefix='', **kwargs) -> Form
Creates a form.
| FQN | Field | |
|---|---|---|
| wtforms | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
from codepathfinder.go_rule import PyWtforms