matched_route has been around since at least 1.0. It's only "not None" if using url dispatch. Also, it's a failed attempt at a fix anyway, because now I remember that it isn't populated until after the NewRequest subscriber has been called. Perhaps you should place your CSRF checks on a ContextFound subscriber instead.
-- Michael -- You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to pylons-discuss@googlegroups.com. To unsubscribe from this group, send email to pylons-discuss+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en.