summaryrefslogtreecommitdiff
path: root/lib/gitlab/request_forgery_protection.rb
Commit message (Collapse)AuthorAgeFilesLines
* Enable frozen string for lib/gitlab/*.rbgfyoung2018-10-221-0/+2
|
* [Rails5] Force the `protect_from_forgery` callback run firstblackst0ne-fix-protect-from-forgery-in-application-controllerblackst0ne2018-06-211-1/+1
| | | | | | | | | | | | Since Rails 5.0 the `protect_from_forgery` callback doesn't run first by default anymore. [1] Instead it gets inserted into callbacks chain where callbacks get called in order. This commit forces the callback to run first. [1]: https://github.com/rails/rails/commit/39794037817703575c35a75f1961b01b83791191
* Add log messages to clarify log messages about API CSRF token verification ↵dm-api-csrf-token-verificationDouwe Maan2017-07-281-0/+8
| | | | failure
* Rescue only from ActionController::InvalidAuthenticityTokenDouwe Maan2017-07-261-0/+8
|
* Add `rescue false`.blackst0ne2017-07-261-1/+1
|
* Refactor CSRF protectionblackst0ne2017-07-261-0/+23