1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
rails--rails/activestorage/app
Cameron Bothner 372dda2a29 Don’t include an undefined X-CSRF-Token header
If there is not a `csrf-token` meta tag in the document, the blob record
XHR was including an `X-CSRF-Token` header set to the string
"undefined." Instead of setting it to undefined, it should not be
included in the absence of a meta tag.
2018-12-27 12:44:19 -05:00
..
assets/javascripts Don’t include an undefined X-CSRF-Token header 2018-12-27 12:44:19 -05:00
controllers Prevent content type and disposition bypass in storage service URLs 2018-11-27 15:36:27 -05:00
javascript/activestorage Don’t include an undefined X-CSRF-Token header 2018-12-27 12:44:19 -05:00
jobs/active_storage Retry ActiveStorage::AnalyzeJobs on download integrity check failures 2018-08-19 01:19:51 -04:00
models/active_storage Fix minor Active Storage docs typo [ci skip] 2018-11-28 00:27:58 +01:00