##// END OF EJS Templates
Sets forgery protection filter first....
Jean-Philippe Lang -
r6195:130b71d121f4
parent child
Show More
@@ -25,6 +25,8 class ApplicationController < ActionController::Base
25
25
26 layout 'base'
26 layout 'base'
27 exempt_from_layout 'builder', 'rsb'
27 exempt_from_layout 'builder', 'rsb'
28
29 protect_from_forgery
28
30
29 # Remove broken cookie after upgrade from 0.8.x (#4292)
31 # Remove broken cookie after upgrade from 0.8.x (#4292)
30 # See https://rails.lighthouseapp.com/projects/8994/tickets/3360
32 # See https://rails.lighthouseapp.com/projects/8994/tickets/3360
@@ -40,7 +42,6 class ApplicationController < ActionController::Base
40
42
41 before_filter :user_setup, :check_if_login_required, :set_localization
43 before_filter :user_setup, :check_if_login_required, :set_localization
42 filter_parameter_logging :password
44 filter_parameter_logging :password
43 protect_from_forgery
44
45
45 rescue_from ActionController::InvalidAuthenticityToken, :with => :invalid_authenticity_token
46 rescue_from ActionController::InvalidAuthenticityToken, :with => :invalid_authenticity_token
46 rescue_from ::Unauthorized, :with => :deny_access
47 rescue_from ::Unauthorized, :with => :deny_access
General Comments 0
You need to be logged in to leave comments. Login now