Enable forgery protection in ActionController

We were manually adding forgery protection to all our controllers, but in Rails 5.2 there's an option (enabled by default for new applications) which adds this protection to all controllers.
2020-09-05 17:51:56 +02:00
parent e58bd7f6f9
commit 305bf9161c
4 changed files with 1 additions and 4 deletions
--- a/app/controllers/management/sessions_controller.rb
+++ b/app/controllers/management/sessions_controller.rb
@@ -4,7 +4,6 @@ class Management::SessionsController < ActionController::Base
  include GlobalizeFallbacks
  include AccessDeniedHandler
  default_form_builder ConsulFormBuilder
-  protect_from_forgery with: :exception

  def create
    destroy_session