Devise needs to prepend forgery

2026-03-25 01:14:43 +00:00 · 2019-01-08 16:02:25 +00:00
parent aaf21d6e92
commit 2a506e072d
1 changed files with 2 additions and 2 deletions
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -1,8 +1,8 @@
 class ApplicationController < ActionController::Base
  # Prevent CSRF attacks by raising an exception.
  # For APIs, you may want to use :null_session instead.
-  protect_from_forgery with: :exception
-  	
+  protect_from_forgery prepend: true, with: :exception
+
  after_action :set_csrf_cookie_for_ng
  
  def set_csrf_cookie_for_ng