Configure CSRF protection with exceptions
rails 4 introduced different strategies, but we never configured one so it would default to a null session.
This commit is contained in:
parent
b13efc5a4c
commit
3e5c29b635
@ -1,5 +1,5 @@
|
||||
class ApplicationController < ActionController::Base
|
||||
protect_from_forgery
|
||||
protect_from_forgery with: :exception
|
||||
|
||||
before_filter :authenticate!
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user