ActionController::Base.request_forgery_protection_token should actually be the name of the token and not true.

This commit is contained in:
Carl Lerche
2010-03-11 10:08:18 -08:00
parent 58796dcfc0
commit 8b4dca109a

View File

@@ -12,7 +12,7 @@ module ActionController #:nodoc:
included do
# Sets the token parameter name for RequestForgery. Calling +protect_from_forgery+
# sets it to <tt>:authenticity_token</tt> by default.
config.request_forgery_protection_token ||= true
config.request_forgery_protection_token ||= :authenticity_token
# Controls whether request forgergy protection is turned on or not. Turned off by default only in test mode.
config.allow_forgery_protection ||= true