Actions
Patch #36317
closed
Set default protect from forgery true
Start date:
Due date:
% Done:
0%
Estimated time:
Description
In Rails 5.2 and later, the default is to raise an exception for invalid CSRF tokens, and there is a configuration for that.
https://github.com/rails/rails/blob/6-1-stable/railties/lib/rails/application/configuration.rb#L123
In Rails 7 and later, the current implementation causes a Deprecation Warning.
Files
Related issues
Updated by 
Updated by
Actions