docs: def protect(view):
      """Protects a view agains CSRF attacks by checking `csrf_token` value in
      submitted values. Do nothing if `config.WTF_CSRF_ENABLED` is not set.
  
      Raises `werkzeug.exceptions.Forbidden` if validation fails.
      """
  
      @wraps(view)
      def csrf_check(*args, **kwargs):
          # an empty form is used to validate current csrf token and only that!
          if not FlaskForm().validate():
              raise Forbidden("CSRF validation failed.")
  
          return view(*args, **kwargs)
  
      return csrf_check