Skip to content

Commit b8e08ad

Browse files
committed
strengthen protect_from_forgery on ErrorsController
1 parent 9558685 commit b8e08ad

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

app/controllers/errors_controller.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
# Provides web actions that represent errors. Rails' standard error pages are static HTML with inline CSS; by using
22
# a custom error controller we get all the layouts and CSS.
33
class ErrorsController < ApplicationController
4-
protect_from_forgery except: [:error], store: :cookie
4+
protect_from_forgery with: :exception, except: [:error], store: :cookie
55

66
def error
77
@exception = request.env['action_dispatch.exception']

0 commit comments

Comments
 (0)