diff options
| author | Gareth Rees <gareth@mysociety.org> | 2014-10-02 10:17:07 +0100 |
|---|---|---|
| committer | Louise Crow <louise.crow@gmail.com> | 2014-12-18 15:16:38 +0000 |
| commit | 9ddfdfff9366793516bc09289a1da6156dfd12ca (patch) | |
| tree | b5145d7bed864b200b35972389f348370bcd4d92 /app/controllers/user_controller.rb | |
| parent | a9308e8c9d44cf7ff0f659bccc6b1235a8a81ee2 (diff) | |
Add global protect_from_forgery
Grepping the git logs didn’t bring up a good reason for this to be
excluded. Seems like it came along after the app was initially created
so it never got fully added for fear of regressions. The specs pass for this
commit.
Diffstat (limited to 'app/controllers/user_controller.rb')
| -rw-r--r-- | app/controllers/user_controller.rb | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/app/controllers/user_controller.rb b/app/controllers/user_controller.rb index baeaab18a..108a6e9e5 100644 --- a/app/controllers/user_controller.rb +++ b/app/controllers/user_controller.rb @@ -7,15 +7,8 @@ require 'set' class UserController < ApplicationController - layout :select_layout - protect_from_forgery :only => [ :contact, - :set_profile_photo, - :signchangeemail, - :clear_profile_photo, - :set_profile_about_me ] # See ActionController::RequestForgeryProtection for details - # Show page about a user def show long_cache |