fix: upgrade to Flask 3.x and replace before_first_request

- Pin Flask to >=3.1.3 to resolve all outstanding Dependabot CVEs
  (session cookie Vary header, Werkzeug DoS/RCE/safe_join vulns)
- Replace removed @before_first_request decorator with app.app_context()
  call at module level, compatible with Flask 3.0+
This commit is contained in:
2026-03-09 20:15:14 -06:00
parent 0c8491ce7a
commit 3e17574fe6
2 changed files with 2 additions and 5 deletions
+1 -4
View File
@@ -66,10 +66,7 @@ def is_valid_email(email):
pattern = r'^[\w\.-]+@[\w\.-]+\.\w+$'
return re.match(pattern, email)
# TODO: @before_first_request is deprecated in Flask 2.2 and removed in Flask 3.0.
# Replace with: with app.app_context(): init_db() at module level, or use a CLI command.
@app.before_first_request
def initialize_database():
with app.app_context():
init_db()
@app.route('/', methods=['GET', 'POST'])