zydronium/neocities
1
0
Fork 0
mirror of https://github.com/neocities/neocities.git synced 2025-08-03 08:11:56 +02:00
Code Issues Projects Releases Packages Wiki Activity

Update csrf_safe? to check the headers. Add some JS code to insert the CSRF token into the XHR request headers.

Browse source
This commit is contained in:
mikeycgto 2013-06-22 16:53:39 -04:00
parent bdfaf0022a
commit bcf9b63fa4
2 changed files with 13 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app.rb
View file

@ -252,7 +252,7 @@ def require_login_ajax
end
def csrf_safe?
csrf_token == params[:csrf_token]
csrf_token == params[:csrf_token] || csrf_token == request.env['HTTP_X_CSRF_TOKEN']
end
def csrf_token