5 ms·
Doesn't protect_from_forgery solves this? I'm pretty sure when I tried using curl the other day I was getting a message error message because the form was missi
by lpgauth 18y ago
Doesn't protect_from_forgery solves this? I'm pretty sure when I tried using curl the other day I was getting a message error message because the form was missing the secret.
- 100k 18y agoThat's to protect against cross site request forgery. This is setting sensitive attributes via post. If a post has the authentication token, it can still set sensitive attributes.