How can I sanitize forms in Flask-WTF?

How can I sanitize forms in Flask-WTF?

You can use Flask-WTF's built-in validators to sanitize form data. For example, you can use the DataRequired and Length validators.

What if I want to remove HTML tags from the input?

You can use the bleach library to clean the input. It allows you to strip out unwanted HTML tags and attributes.

Can you show me a code example?

Sure! Here's a simple example:

from flask_wtf import FlaskForm
from wtforms import StringField
from wtforms.validators import DataRequired
import bleach

class MyForm(FlaskForm):
    name = StringField('Name', validators=[DataRequired()])

    def sanitize_name(self):
        return bleach.clean(self.name.data)

Is there a way to validate email addresses too?

Yes, you can use the Email validator from WTForms to validate email addresses. It checks if the input is a valid email format.