github/diaspora
1
1
Fork 0
mirror of https://github.com/diaspora/diaspora.git synced 2026-01-09 15:18:11 -05:00
Code Issues Packages Projects Releases Wiki Activity

Disable the default CSRF protection.

Browse Source 
This was added in Rails 5.2 defaults, but we upgraded from 5.1 defaults to 6.1, so we didn't notice until now.

closes #8374
This commit is contained in:
Dennis Schubert
2022-07-21 05:24:13 +02:00
committed by Benjamin Neff
parent 3cf84c838f
commit 428c97d089
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
config/application.rb
View File

@@ -39,6 +39,11 @@ module Diaspora
# Enable escaping HTML in JSON.
config.active_support.escape_html_entities_in_json = true
# We specify CSRF protection manually in ApplicationController with
# protect_from_forgery - having it enabled anywhere by default breaks
# federation.
config.action_controller.default_protect_from_forgery = false
# Enable the asset pipeline
config.assets.enabled = true