def delhistory(): if not str(request.referrer).startswith(request.url_root): #app.logger.info("referer:", str(request.referrer)) return "CSRF ATTEMPT!" os.unlink('ua-history.txt') return "ok"