From 6a8d4a0359d5c898301fcac0da785e9b59675dd8 Mon Sep 17 00:00:00 2001 From: Konstantin Haase Date: Mon, 20 Jun 2011 09:22:15 +0200 Subject: [PATCH] fix superclass this didn't matter, since it overrides call --- rack-protection/lib/rack/protection/json_csrf.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rack-protection/lib/rack/protection/json_csrf.rb b/rack-protection/lib/rack/protection/json_csrf.rb index 2b25eb2a..6fc3bf72 100644 --- a/rack-protection/lib/rack/protection/json_csrf.rb +++ b/rack-protection/lib/rack/protection/json_csrf.rb @@ -10,7 +10,7 @@ module Rack # JSON GET APIs are volnurable to being embedded as JavaScript while the # Array prototype has been patched to track data. Checks the referrer # even on GET requests if the content type is JSON. - class JsonCsrf < AuthenticityToken + class JsonCsrf < Base default_reaction :deny def call(env)