]> cat aescling's git repositories - mastodon.git/commit
cat aescling's git repositories / mastodon.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2091ae9) | patch
Suppress CSRF token warnings (#6240)
authorPatrick Figel <patrick@figel.email>
Mon, 15 Jan 2018 05:51:23 +0000 (06:51 +0100)
committerEugen Rochko <eugen@zeonfederated.com>
Mon, 15 Jan 2018 05:51:23 +0000 (06:51 +0100)
commit537d2939b10df9121e5a9f13a9d66c568ff681bf
tree8e4dcb8a4566497534ad0bd81b12c318bd760bcbtree | snapshot
parent2091ae92be5d04cd4dadb2200c507ce8d8d2623ecommit | diff
Suppress CSRF token warnings (#6240)

CSRF token checking was enabled for API controllers in #6223,
producing "Can't verify CSRF token authenticity" log spam. This
disables logging of failed CSRF checks.

This also changes the protection strategy for
PushSubscriptionsController to use exceptions, making it consistent
with other controllers that use sessions.
app/controllers/api/web/push_subscriptions_controller.rb diff | blob | history
config/initializers/suppress_csrf_warnings.rb [new file with mode: 0644] blob
source code fur Kibicat Mastodon