6 ms·
Does anyone have any links describing the new CSRF for JS GET requests? Also they misspelled CSRF in the blog post title :/
by jasonkeene 13y ago
Does anyone have any links describing the new CSRF for JS GET requests? Also they misspelled CSRF in the blog post title :/
- chancancode 13y agoNice catch about the title, fixed! In the release notes: http://edgeguides.rubyonrails.org/4_1_release_notes.html#csrf-protection-from-remote-script-tags http://edgeguides.rubyonrails.org/4_1_release_notes.html#csr... In the upgrading rails guide: http://edgeguides.rubyonrails.org/upgrading_ruby_on_rails.html#csrf-protection-from-remote-script-tags http://edgeguides.rubyonrails.org/upgrading_ruby_on_rails.ht... In the docs: http://edgeapi.rubyonrails.org/classes/ActionController/RequestForgeryProtection.html http://edgeapi.rubyonrails.org/classes/ActionController/Requ...