Protect root_path from forgery with null_session

Some proxies query OPTIONS for / to see if the page
is alive.
This commit is contained in:
Henne Vogelsang 2016-03-09 14:12:31 +01:00
parent 36f3730846
commit 976616b47b

View file

@ -1,4 +1,5 @@
class ConferenceController < ApplicationController
protect_from_forgery with: :null_session
before_filter :respond_to_options
load_and_authorize_resource find_by: :short_title
load_resource :program, through: :conference, singleton: true, except: :index