diff options
| author | Filipe Moreira <famoreira@gmail.com> | 2012-03-12 21:13:17 +0100 |
|---|---|---|
| committer | Filipe Moreira <famoreira@gmail.com> | 2012-03-12 21:13:17 +0100 |
| commit | 0b36ad706667b95eee444f1b9272f59c0495d724 (patch) | |
| tree | 9cfd9a13089985356e430532bcfabdfd4ed7e199 | |
| parent | 78954acde740716746959aa77c5c0b103789f2e4 (diff) | |
| download | rails-0b36ad706667b95eee444f1b9272f59c0495d724.tar.gz rails-0b36ad706667b95eee444f1b9272f59c0495d724.tar.bz2 rails-0b36ad706667b95eee444f1b9272f59c0495d724.zip | |
Advise to keep secret token private
| -rw-r--r-- | railties/lib/rails/generators/rails/app/templates/config/initializers/secret_token.rb.tt | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/railties/lib/rails/generators/rails/app/templates/config/initializers/secret_token.rb.tt b/railties/lib/rails/generators/rails/app/templates/config/initializers/secret_token.rb.tt index a3143f1346..e02397aaf9 100644 --- a/railties/lib/rails/generators/rails/app/templates/config/initializers/secret_token.rb.tt +++ b/railties/lib/rails/generators/rails/app/templates/config/initializers/secret_token.rb.tt @@ -4,4 +4,6 @@ # If you change this key, all old signed cookies will become invalid! # Make sure the secret is at least 30 characters and all random, # no regular words or you'll be exposed to dictionary attacks. +# Make sure your secret_token is kept private +# if you're sharing your code publicly. <%= app_const %>.config.secret_token = '<%= app_secret %>' |