Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

This project is archived and is in readonly mode.

Session disappears after DELETE or PUT xhr request

#6525

Session data is cleared out, and is empty after an XHR request, when the HTTP method is :delete or :put, when Application.config.session_store :active_record_store turned on.

Bug appeared in Rails 3.0.4, and 3.0.5 is also concerned, but the issue doesn't occur in 3.0.3.

Reported by whatwho · March 4th, 2011 @ 07:05 PM

State: invalid
Milestone: none
Assigned to: nobody
Importance: Low

Activity

  1. Andrew White
    Andrew White
    • State changed from new to invalid
    • Importance changed from to Low

    Are you sending the CSRF token in your XHR requests? If not then the you're seeing the effect of the CSRF security fix in 3.0.4. See the release notes for more information: http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ru...

    March 4th, 2011 @ 09:17 PM

  2. whatwho
    whatwho

    Thank you, it was my mistake by a careless rails version update.

    March 6th, 2011 @ 12:06 PM