diff options
| author | Gareth Rees <gareth@mysociety.org> | 2014-10-02 10:17:07 +0100 |
|---|---|---|
| committer | Louise Crow <louise.crow@gmail.com> | 2014-12-18 15:16:38 +0000 |
| commit | 9ddfdfff9366793516bc09289a1da6156dfd12ca (patch) | |
| tree | b5145d7bed864b200b35972389f348370bcd4d92 /app/controllers/admin_controller.rb | |
| parent | a9308e8c9d44cf7ff0f659bccc6b1235a8a81ee2 (diff) | |
Add global protect_from_forgery
Grepping the git logs didn’t bring up a good reason for this to be
excluded. Seems like it came along after the app was initially created
so it never got fully added for fear of regressions. The specs pass for this
commit.
Diffstat (limited to 'app/controllers/admin_controller.rb')
| -rw-r--r-- | app/controllers/admin_controller.rb | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/app/controllers/admin_controller.rb b/app/controllers/admin_controller.rb index 3bf40b8f9..7760c372b 100644 --- a/app/controllers/admin_controller.rb +++ b/app/controllers/admin_controller.rb @@ -9,7 +9,6 @@ require 'fileutils' class AdminController < ApplicationController layout "admin" before_filter :authenticate - protect_from_forgery # See ActionController::RequestForgeryProtection for details # action to take if expecting an authenticity token and one isn't received def handle_unverified_request |