Skip to content

Conversation

@ceritium
Copy link

@ceritium ceritium commented Jul 5, 2018

Rails 5.1 has the CSRF protection disabled by default but rails 5.2 enable it again. rails/rails#29742

Tech details

  • Remove the fancy ajax delete.
  • Use jquery_ujs for the delete action (it must be included by the host app at the moment)
  • Add csrf_meta_tags on the layout

ceritium added 2 commits July 5, 2018 16:54
Rails 5.1 has the CSRF protection disabled by default but rails 5.2 enable it
again. rails/rails#29742

- Remove the fancy ajax delete.
- Use jquery_ujs for the delete action (it must be included by the host app at the moment).
- Add `csrf_meta_tags` on the layout.
@ceritium ceritium force-pushed the missing-csrf-token branch from 10fbe4f to 1bd5ba6 Compare July 5, 2018 14:56
@ceritium ceritium force-pushed the missing-csrf-token branch from 448403c to b2f2893 Compare July 6, 2018 07:21
@atrzaska
Copy link

atrzaska commented Jul 6, 2018

@opsidao can you review this ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants