mirror of
https://github.com/github/rails.git
synced 2026-04-26 03:00:59 -04:00
ActionController::Base.request_forgery_protection_token should actually be the name of the token and not true.
This commit is contained in:
@@ -12,7 +12,7 @@ module ActionController #:nodoc:
|
||||
included do
|
||||
# Sets the token parameter name for RequestForgery. Calling +protect_from_forgery+
|
||||
# sets it to <tt>:authenticity_token</tt> by default.
|
||||
config.request_forgery_protection_token ||= true
|
||||
config.request_forgery_protection_token ||= :authenticity_token
|
||||
|
||||
# Controls whether request forgergy protection is turned on or not. Turned off by default only in test mode.
|
||||
config.allow_forgery_protection ||= true
|
||||
|
||||
Reference in New Issue
Block a user