diff options
| author | Gareth Rees <gareth@mysociety.org> | 2014-10-02 10:17:07 +0100 |
|---|---|---|
| committer | Louise Crow <louise.crow@gmail.com> | 2014-12-18 15:16:38 +0000 |
| commit | 9ddfdfff9366793516bc09289a1da6156dfd12ca (patch) | |
| tree | b5145d7bed864b200b35972389f348370bcd4d92 /app/controllers/application_controller.rb | |
| parent | a9308e8c9d44cf7ff0f659bccc6b1235a8a81ee2 (diff) | |
Add global protect_from_forgery
Grepping the git logs didn’t bring up a good reason for this to be
excluded. Seems like it came along after the app was initially created
so it never got fully added for fear of regressions. The specs pass for this
commit.
Diffstat (limited to 'app/controllers/application_controller.rb')
| -rw-r--r-- | app/controllers/application_controller.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 4d3f40d40..445a13d0c 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -14,6 +14,8 @@ class ApplicationController < ActionController::Base end class RouteNotFound < StandardError end + protect_from_forgery + # assign our own handler method for non-local exceptions rescue_from Exception, :with => :render_exception |