This project is archived and is in readonly mode.
allow_forgery_protection is false even in development environment by default
-
Denis Odorcic- Tag changed from rails3 to csrf, patch, rails3, request-forgery-protection
I've added a patch for this (and light rework to remove some duplicate code). This is also related to #4199 javascript TypeError with rails3 project (rails.js, line 2). allow_forgery_protection is always evaluating to false, which makes <%= csrf_meta_tag %> never generate anything, causing rails.js to log errors since it couldn't find the authenticity tags.
-
fix-protect-from-forgery.diff
3.74 KB
-
Yehuda Katz (wycats)- State changed from new to resolved
- Milestone cleared.
I think this is fixed in master? Please reopen if it's not.
-
Rizwan Reza- Milestone cleared.
- State changed from resolved to new
Just confirmed it, it's resolved in master.
-
Yehuda Katz (wycats)
- State changed from new to resolved
- Milestone cleared.
-
-
