Matthew Caruana Galizia 683b9627b3 Respect `log_warning_on_csrf_failure` setting for all CSRF failures ... CSRF verification for non-XHR GET requests (cross-origin `<script>` tags) didn't check this flag before logging failures. Setting `config.action_controller.log_warning_on_csrf_failure = false` now disables logging for these CSRF failures as well. Closes #25086. Signed-off-by: Jeremy Daer <jeremydaer@gmail.com>		2016-05-23 10:21:30 -07:00
..
abstract	…
assertions	Support for unified Integer class in Ruby 2.4+	2016-05-18 21:58:51 -07:00
controller	Respect `log_warning_on_csrf_failure` setting for all CSRF failures	2016-05-23 10:21:30 -07:00
dispatch	Document and test ActionDispatch server_port	2016-05-12 18:46:16 +01:00
fixtures	Properly verify that cache accepts and user `expires` value.	2016-04-17 23:12:04 +05:30
journey	Deprecate :controller and :action path parameters	2016-03-01 08:48:53 +00:00
lib/controller	…
routing	…
tmp	…
abstract_unit.rb	Merge pull request #23932 from arthurnn/arthurnn/remove_load_paths	2016-03-01 16:10:09 -05:00