Skip to content
This repository has been archived by the owner on Dec 27, 2023. It is now read-only.

Remove deprecated skip of authenticity token #159

Open
smcgregor opened this issue Dec 20, 2015 · 0 comments
Open

Remove deprecated skip of authenticity token #159

smcgregor opened this issue Dec 20, 2015 · 0 comments

Comments

@smcgregor
Copy link
Member

In the Rails 4.2 branch I am preparing to merge to develop, I needed to add a line to the sessions controller for skipping the CSRF check on logout because this was not previously checked by the Devise gem. As soon as all the extensions have an updated version of privly-applications, or 3 months (whichever is sooner), the line found below should be removed and the updated code deployed.

skip_before_filter :verify_authenticity_token , :only => [:destroy]

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant