rails--rails/railties/lib/rails
Jean Boussier 4e3504fc5b Stop failing GSRF token generation when session is disabled
In theory this should have warned early that the CSRF check
will fail, which would have been less puzzling for the developer.

However there are several cases where we render forms but the session
is inacessible. That's the case of turbo (https://github.com/hotwired/turbo-rails/issues/243)
as well as some others.

So unless we figure a proper way to detect these cases, we're better
to not cause this error.

Writing to a disabled session directly will still raise, this
only silence it for the specific case of CSRF.
2021-10-11 14:08:48 +02:00
..
api Rename master to main in all code references 2021-01-19 20:46:33 +00:00
application Stop failing GSRF token generation when session is disabled 2021-10-11 14:08:48 +02:00
autoloaders Revise style 2021-09-08 18:21:21 +02:00
command Standardize nodoc comments 2021-07-29 21:18:07 +00:00
commands Add SSL support for postgresql in bin/rails dbconsole 2021-08-27 22:22:28 +08:00
console
engine Deduplicate the environment glob in engine paths 2021-05-06 18:54:11 +02:00
generators Make Sprockets more optional, offer Propshaft as alternative (#43261) 2021-10-09 17:03:05 +02:00
plugin
rack Don't require ActionDispatch::{Request,Response} 2021-07-19 01:30:54 +01:00
railtie Standardize nodoc comments 2021-07-29 21:18:07 +00:00
tasks Remove default reliance on Sass and CSS generators (#43110) 2021-08-26 13:40:25 +02:00
templates Merge pull request #42470 from nfedyashev/add-missing-ids-to-mailer-email-template 2021-09-15 13:45:34 -04:00
test_unit Extract `list_tests` from `Rails::TestUnit::Runner.load_tests` 2021-09-07 21:34:56 +09:00
all.rb Make Sprockets more optional, offer Propshaft as alternative (#43261) 2021-10-09 17:03:05 +02:00
app_loader.rb Railities typo fixes. 2019-02-01 16:42:40 +05:30
app_updater.rb Make Sprockets more optional, offer Propshaft as alternative (#43261) 2021-10-09 17:03:05 +02:00
application.rb Remove docs on multiple applications 2021-08-06 16:25:20 -05:00
application_controller.rb Add 'self' to ApplicationController CSP 2021-06-05 01:39:36 +01:00
autoloaders.rb Revise style 2021-09-08 18:21:21 +02:00
backtrace_cleaner.rb Missing require AS/core_ext/string/access 2019-12-29 14:12:42 +09:00
cli.rb
code_statistics.rb Standardize nodoc comments 2021-07-29 21:18:07 +00:00
code_statistics_calculator.rb Standardize nodoc comments 2021-07-29 21:18:07 +00:00
command.rb Improve help for Rake tasks 2021-07-21 22:12:08 +02:00
commands.rb
configuration.rb Standardize nodoc comments 2021-07-29 21:18:07 +00:00
dev_caching.rb
engine.rb Restore set_autoload_path triggering before bootstrap 2021-10-04 22:01:23 +02:00
gem_version.rb Preparing for 7.0.0.alpha2 release 2021-09-15 18:22:51 -04:00
generators.rb Remove default reliance on Sass and CSS generators (#43110) 2021-08-26 13:40:25 +02:00
info.rb Standardize nodoc comments 2021-07-29 21:18:07 +00:00
info_controller.rb use ruby 2.7's filter_map instead of select + map 2021-04-26 17:55:33 -04:00
initializable.rb Standardize nodoc comments 2021-07-29 21:18:07 +00:00
mailers_controller.rb Enable `Style/ExplicitBlockArgument` cop 2021-09-05 17:06:19 +02:00
paths.rb Bring back feature that allows loading external route iles: 2019-12-06 14:20:12 +01:00
rack.rb
railtie.rb Standardize nodoc comments 2021-07-29 21:18:07 +00:00
ruby_version_check.rb Rails 7 requires Ruby 2.7 and prefer Ruby 3+ 2021-02-04 16:34:53 +00:00
secrets.rb unsafe_load secrets.yml with psych 4 2021-07-03 09:19:22 -04:00
source_annotation_extractor.rb Fix inline code markup [ci-skip] 2021-02-14 11:20:35 -06:00
tasks.rb Remove deprecated `rake initializers` tasks 2020-10-30 00:26:09 +00:00
test_help.rb Use testing lazy-load hooks: 2018-07-04 16:34:59 -04:00
version.rb
welcome_controller.rb Fixes an issue where an error is raised when a new rails app hits the internal rails welcome page, the exception is ActionController::RequestForgeryProtection::DisabledSessionError 2021-09-13 08:44:02 +01:00