1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
rails--rails/actionpack/lib
Matthew Caruana Galizia 683b9627b3
Respect log_warning_on_csrf_failure setting for all CSRF failures
CSRF verification for non-XHR GET requests (cross-origin `<script>`
tags) didn't check this flag before logging failures.

Setting `config.action_controller.log_warning_on_csrf_failure = false`
now disables logging for these CSRF failures as well.

Closes #25086.

Signed-off-by: Jeremy Daer <jeremydaer@gmail.com>
2016-05-23 10:21:30 -07:00
..
abstract_controller Revert "Make sure the cache is always populated" 2016-05-20 23:28:00 -03:00
action_controller Respect log_warning_on_csrf_failure setting for all CSRF failures 2016-05-23 10:21:30 -07:00
action_dispatch Add back in Oxford Comma 2016-05-19 15:41:59 -04:00
action_pack Start Rails 5.1 development 🎉 2016-05-10 03:46:56 -03:00
abstract_controller.rb Move Caching module to Abstract Controller 2016-02-23 21:11:15 -03:00
action_controller.rb Move Caching module to Abstract Controller 2016-02-23 21:11:15 -03:00
action_dispatch.rb Publish AS::Executor and AS::Reloader APIs 2016-03-02 02:14:20 +10:30
action_pack.rb Update copyright notices to 2016 [ci skip] 2015-12-31 18:27:19 +02:00