From 976616b47bd9669cb16dc7f97d228ac6cabab2a5 Mon Sep 17 00:00:00 2001 From: Henne Vogelsang Date: Wed, 9 Mar 2016 14:12:31 +0100 Subject: [PATCH] Protect root_path from forgery with null_session Some proxies query OPTIONS for / to see if the page is alive. --- app/controllers/conference_controller.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/app/controllers/conference_controller.rb b/app/controllers/conference_controller.rb index 64e55e6a..16aa382f 100644 --- a/app/controllers/conference_controller.rb +++ b/app/controllers/conference_controller.rb @@ -1,4 +1,5 @@ class ConferenceController < ApplicationController + protect_from_forgery with: :null_session before_filter :respond_to_options load_and_authorize_resource find_by: :short_title load_resource :program, through: :conference, singleton: true, except: :index