rails--rails/activestorage/app/controllers/active_storage/base_controller.rb

# frozen_string_literal: true

# The base class for all Active Storage controllers.
class ActiveStorage::BaseController < ActionController::Base
  include ActiveStorage::SetCurrent, ActiveStorage::Streaming

  protect_from_forgery with: :exception

  self.etag_with_template_digest = false
end
Protect all active storage controllers agains CSRF Before it was possible to for example use the direct upload controller without using the site. 2018-04-06 14:28:44 -04:00			`# frozen_string_literal: true`

Extract ActiveStorage::SetCurrent Provide a handy concern for custom Active Storage controllers that can't inherit from ActiveStorage::BaseController. 2018-08-16 01:41:15 -04:00			`# The base class for all Active Storage controllers.`
Protect all active storage controllers agains CSRF Before it was possible to for example use the direct upload controller without using the site. 2018-04-06 14:28:44 -04:00			`class ActiveStorage::BaseController < ActionController::Base`
Extract ActiveStorage::Streaming so your own controllers can use it (#41440) Extract ActiveStorage::Streaming so your own controller can use it 2021-02-19 09:40:56 -05:00			`include ActiveStorage::SetCurrent, ActiveStorage::Streaming`
Use a current model to provide the host for service urls Trying to pass the current request down to the service so that it can create full urls instead of paths makes the API messy so use a model based on ActiveSupport::CurrentAttributes to provide the current host to services that need it (primarily the disk service). 2018-03-26 09:36:39 -04:00
Extract ActiveStorage::SetCurrent Provide a handy concern for custom Active Storage controllers that can't inherit from ActiveStorage::BaseController. 2018-08-16 01:41:15 -04:00			`protect_from_forgery with: :exception`
Active Storage: allow serving files by proxying 2020-05-11 16:21:58 -04:00
Disable template digesting for Active Storage controllers Error entries appear in the log when we request ActiveStorage controllers (`ActiveStorage::Representations::ProxyController#show`, `ActiveStorage::Blobs::ProxyController#show`). These entries look like: "Couldn't find template for digesting: active_storage/representations/proxy/show". These controllers use the method `ActionController::ConditionalGet#http_cache_forever`, and therefore `ActionController::ConditionalGet#combine_etags` method, and therefore `ActionController::EtagWithTemplateDigest` module via `etaggers` array. `ActionController::EtagWithTemplateDigest` module requires a template (view). We have no views in ActiveStorage, so `EtagWithTemplateDigest` is now turned off in ActiveStorage controllers by `etag_with_template_digest` class attribute. 2020-07-05 10:51:08 -04:00			`self.etag_with_template_digest = false`
Protect all active storage controllers agains CSRF Before it was possible to for example use the direct upload controller without using the site. 2018-04-06 14:28:44 -04:00			`end`