@@ -25,6 +25,8 class ApplicationController < ActionController::Base | |||||
25 |
|
25 | |||
26 | layout 'base' |
|
26 | layout 'base' | |
27 | exempt_from_layout 'builder', 'rsb' |
|
27 | exempt_from_layout 'builder', 'rsb' | |
|
28 | ||||
|
29 | protect_from_forgery | |||
28 |
|
30 | |||
29 | # Remove broken cookie after upgrade from 0.8.x (#4292) |
|
31 | # Remove broken cookie after upgrade from 0.8.x (#4292) | |
30 | # See https://rails.lighthouseapp.com/projects/8994/tickets/3360 |
|
32 | # See https://rails.lighthouseapp.com/projects/8994/tickets/3360 | |
@@ -40,7 +42,6 class ApplicationController < ActionController::Base | |||||
40 |
|
42 | |||
41 | before_filter :user_setup, :check_if_login_required, :set_localization |
|
43 | before_filter :user_setup, :check_if_login_required, :set_localization | |
42 | filter_parameter_logging :password |
|
44 | filter_parameter_logging :password | |
43 | protect_from_forgery |
|
|||
44 |
|
45 | |||
45 | rescue_from ActionController::InvalidAuthenticityToken, :with => :invalid_authenticity_token |
|
46 | rescue_from ActionController::InvalidAuthenticityToken, :with => :invalid_authenticity_token | |
46 | rescue_from ::Unauthorized, :with => :deny_access |
|
47 | rescue_from ::Unauthorized, :with => :deny_access |
General Comments 0
You need to be logged in to leave comments.
Login now