3 ms·
Rails has CSRF protections baked in; unless you explicitly turn it off, non-GET requests require a CSRF token associated with the user session to complete succe
by cheald 15y ago
Rails has CSRF protections baked in; unless you explicitly turn it off, non-GET requests require a CSRF token associated with the user session to complete successfully.
- scriby 15y agoThat makes sense. I've been doing node js too long where you have to do this stuff by hand :0