diff options
| author | Winnie Hellmann <winnie@gitlab.com> | 2017-10-06 20:40:41 +0000 |
|---|---|---|
| committer | Fatih Acet <acetfatih@gmail.com> | 2017-10-06 20:40:41 +0000 |
| commit | 265b1a3b72ff7552e2ae01a059f80bd59714649d (patch) | |
| tree | 9f0d3c5249ae0eac5ed06c2c1b79abb9fa1dc6ac /app/assets/javascripts/lib | |
| parent | 2cf5dca8f80cdefeb8932bf80417f52f289668c8 (diff) | |
| download | gitlab-ce-265b1a3b72ff7552e2ae01a059f80bd59714649d.tar.gz | |
Show confirmation modal before deleting account
Diffstat (limited to 'app/assets/javascripts/lib')
| -rw-r--r-- | app/assets/javascripts/lib/utils/csrf.js | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/app/assets/javascripts/lib/utils/csrf.js b/app/assets/javascripts/lib/utils/csrf.js index ae41cc5e8a8..0bdb547d31a 100644 --- a/app/assets/javascripts/lib/utils/csrf.js +++ b/app/assets/javascripts/lib/utils/csrf.js @@ -14,6 +14,9 @@ If you need to compose a headers object, use the spread operator: someOtherHeader: '12345', } ``` + +see also http://guides.rubyonrails.org/security.html#cross-site-request-forgery-csrf +and https://github.com/rails/jquery-rails/blob/v4.3.1/vendor/assets/javascripts/jquery_ujs.js#L59-L62 */ const csrf = { @@ -53,4 +56,3 @@ if ($.rails) { } export default csrf; - |