4 ms·Don't forget CSRF, and don't do destructive actions via GETs.by getsat 15y agoDon't forget CSRF, and don't do destructive actions via GETs.zhoutong 15y agoMost actions are RESTful, and CSRF is Rails' default.