"""The general recommendation by people in the know [OWASP]_, is
   'to implement the Synchronizer Token Pattern (STP_)'.
   .. [OWASP] The Open Web Application Security Project
      (https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet)
   .. _STP: http://www.corej2eepatterns.com/Design/PresoDesign.htm
"""
How do I break a link in a rst docstring to satisfy pep8?