Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.
This project is archived and is in readonly mode.
The API documentation on http://api.rubyonrails.org/classes/ActionController/RequestForgeryP... claims that protect_from_forgery would raise an ActionController::InvalidAuthenticityToken if the CSRF token isn't matched with the expectations. Earlier this year in the commit https://github.com/rails/rails/commit/ae19e4141f27f80013c11e8b1da68... this behaviour was changed to resetting the session per default on an unverified request (instead of throwing the exception).
Reported by Patrick Daryll Glandien · May 8th, 2011 @ 04:53 PM
No comments yet.