diff options
| -rw-r--r-- | app/controllers/admin_controller.rb | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/app/controllers/admin_controller.rb b/app/controllers/admin_controller.rb index 4734146a8..76b4f66e7 100644 --- a/app/controllers/admin_controller.rb +++ b/app/controllers/admin_controller.rb @@ -11,12 +11,17 @@ require 'fileutils' class AdminController < ApplicationController layout "admin" before_filter :assign_http_auth_user + protect_from_forgery # See ActionController::RequestForgeryProtection for details # Always give full stack trace for admin interface def local_request? true end + def handle_unverified_request + raise(ActionController::InvalidAuthenticityToken) + end + # Expire cached attachment files for a request def expire_for_request(info_request) # Clear out cached entries, by removing files from disk (the built in |