Merge pull request #2522 from hennevogel/bugfix/csrf_commercials

Bugfix/csrf commercials
This commit is contained in:
Henne Vogelsang 2019-05-24 14:31:30 +02:00 committed by GitHub
commit 4e79ba3e81
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 1 additions and 1 deletions

View file

@ -4,6 +4,7 @@ class CommercialsController < ApplicationController
load_resource :conference, find_by: :short_title
before_action :set_event
load_and_authorize_resource through: :event
skip_before_action :verify_authenticity_token
def create
@commercial = @event.commercials.build(commercial_params)

View file

@ -2,7 +2,6 @@
class SchedulesController < ApplicationController
load_and_authorize_resource
protect_from_forgery with: :null_session
before_action :respond_to_options
load_resource :conference, find_by: :short_title
load_resource :program, through: :conference, singleton: true, except: :index