diff options
| author | Robin Dupret <robin.dupret@gmail.com> | 2019-07-29 12:41:35 +0200 |
|---|---|---|
| committer | Robin Dupret <robin.dupret@gmail.com> | 2019-07-29 12:42:24 +0200 |
| commit | 682f6648193a7d166d8f54be98af19c62b4e938f (patch) | |
| tree | e296ea0aaf274212ace1d691085852c185d85fff | |
| parent | 36c5a749883fa56276e5800573edb58f5720cdfc (diff) | |
| download | rails-682f6648193a7d166d8f54be98af19c62b4e938f.tar.gz rails-682f6648193a7d166d8f54be98af19c62b4e938f.tar.bz2 rails-682f6648193a7d166d8f54be98af19c62b4e938f.zip | |
Tiny documentation fix [ci skip]
| -rw-r--r-- | guides/source/working_with_javascript_in_rails.md | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/guides/source/working_with_javascript_in_rails.md b/guides/source/working_with_javascript_in_rails.md index b740e933ba..28af1cd88d 100644 --- a/guides/source/working_with_javascript_in_rails.md +++ b/guides/source/working_with_javascript_in_rails.md @@ -536,9 +536,9 @@ the token: var token = document.getElementsByName('csrf-token')[0].content ``` -You can then submit this token as a X-CSRF-Token in your header for your -Ajax requst. You do not need to add a CSRF for GET requests, only non-GET -requests. +You can then submit this token as a `X-CSRF-Token` header for your +Ajax request. You do not need to add a CSRF token for GET requests, +only non-GET ones. You can read more about about Cross-Site Request Forgery in [Security](https://guides.rubyonrails.org/security.html#cross-site-request-forgery-csrf) |