From 99ddcadd893e22ef827e09d82e78e096b8579d62 Mon Sep 17 00:00:00 2001 From: Artur Beljajev Date: Thu, 12 Sep 2019 17:17:47 +0300 Subject: [PATCH] Remove unnecessary statement CSRF protection makes no sense in EPP and is already disabled with `skip_before_action :verify_authenticity_token`. --- app/controllers/epp_controller.rb | 1 - 1 file changed, 1 deletion(-) diff --git a/app/controllers/epp_controller.rb b/app/controllers/epp_controller.rb index 496526d71..820a992f3 100644 --- a/app/controllers/epp_controller.rb +++ b/app/controllers/epp_controller.rb @@ -1,6 +1,5 @@ class EppController < ApplicationController layout false - protect_from_forgery with: :null_session skip_before_action :verify_authenticity_token before_action :ensure_session_id_passed