mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
2d20a7696a
Disable CSRF protection for ActiveStorage::DiskController#update. The local disk service is intended to imitate a third-party service like S3 or GCS, so we don't care where direct uploads originate: they’re authorized by signed tokens. Closes #30290. [Shinichi Maeshima & George Claghorn] |
||
---|---|---|
.. | ||
app | ||
bin | ||
config | ||
lib/assets | ||
log | ||
public | ||
config.ru | ||
package.json | ||
Rakefile |