Lighthouse has a new layout.
Prefer the old one? Return to the old layout,
and switch back any time from the link at the top of each page.
This project is archived and is in readonly mode.
protect_from_forgery :except override in individual controllers isn't working in rails 3pre
#3912
When protect_from_forgery is defined in
application_controller.rb (ApplicationController),
protect_from_forgery :except => :method within individual
controllers doesn't skip forgery protection for those methods as it
should.
If protect_from_forgery is set in each controller explicitly,
one of them containing an :except clause, the exception is honored.
Seems to be that the problem is only when protect_from_forgery is
defined in ApplicationController, the exceptions in individual
controllers don't take.
Reported by bshelton229 ·
February 9th, 2010 @ 06:58 PM
