#154 [PATCH] add authenticity_token in auto_complete - Ruby on Rails

Type	To find
responsible:me	tickets assigned to you
tagged:"@high"	tickets tagged @high
milestone:next	tickets in the upcoming milestone
state:invalid	tickets with the state invalid
created:"last week"	tickets created last week
sort:number, importance, updated	tickets sorted by #, importance or updated
Combine keywords for powerful searching.
Use advanced searching »

This project is archived and is in readonly mode.

#154 ✓invalid

[PATCH] add authenticity_token in auto_complete

Reported by Zhang Jun | May 9th, 2008 @ 08:47 AM

I am using Rails 2.0.2 with auto_complete plugin

But even the example doesn't work. After googling, I found some discussions:

So, It seems this problem has been there for about half of a year.

I would like to create this ticket for fixing this bug in auto_complete/auto_complete_macros_helper.rb

Please see the patch in attachment

You flagged this item as spam.
Michael Schuerig May 9th, 2008 @ 11:26 AM
The root problem is in scriptaculous. It uses POST requests where GET is appropriate. The former are checked against the authenticity token, the latter are not.
Related Tickets
Pratik May 11th, 2008 @ 08:06 PM
- State changed from “new” to “invalid”
Please create this ticket in Rails Plugins project - http://rails.lighthouseapp.com/p...
Thanks.
You flagged this item as spam.
Zhang Jun May 12th, 2008 @ 02:40 AM
http://rails.lighthouseapp.com/p...
You flagged this item as spam.
bingbing March 26th, 2011 @ 01:43 AM
- Tag set to “patch, request-forgery-protection, scriptaculous”
omega watch

Help contribute to this project by taking a few moments to create your personal profile. Create your profile »

<h2 style="font-size: 14px">Tickets have moved to Github</h2>

The new ticket tracker is available at <a href="https://github.com/rails/rails/issues">https://github.com/rails/rails/issues</a>