From 3e5c29b6353b78aad8995f541395433ea84f5b7e Mon Sep 17 00:00:00 2001 From: Thibault Jouan Date: Thu, 30 Apr 2015 11:43:22 +0000 Subject: [PATCH] Configure CSRF protection with exceptions rails 4 introduced different strategies, but we never configured one so it would default to a null session. --- app/controllers/application_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index ae6546f..3d2d46f 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -1,5 +1,5 @@ class ApplicationController < ActionController::Base - protect_from_forgery + protect_from_forgery with: :exception before_filter :authenticate!