3 ms·
> all GET requests skip protect_from_forgery filter in Rails Now that's interesting, I wasn't aware of that. It makes sense due to the Rails convention being G
by driverdan 15y ago
> all GET requests skip protect_from_forgery filter in Rails
Now that's interesting, I wasn't aware of that. It makes sense due to the Rails convention being GET is only for fetching data. So this does make GET more insecure than POST for Rails.