diff options
| author | Zachary Scott <e@zzak.io> | 2014-07-29 10:28:56 -0700 |
|---|---|---|
| committer | Zachary Scott <e@zzak.io> | 2014-07-29 10:28:56 -0700 |
| commit | a240ad0c89915d1ddc8aca4dcee0dd084502c72c (patch) | |
| tree | 8c18a1b9649f7d6431d3b7fff3434d0654503d2c | |
| parent | 89ad1d85aa0462abd04bd0cf97a6daa0149f303e (diff) | |
| download | rails-a240ad0c89915d1ddc8aca4dcee0dd084502c72c.tar.gz rails-a240ad0c89915d1ddc8aca4dcee0dd084502c72c.tar.bz2 rails-a240ad0c89915d1ddc8aca4dcee0dd084502c72c.zip | |
:nail_care: from #16329 [ci skip]
| -rw-r--r-- | guides/source/routing.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/guides/source/routing.md b/guides/source/routing.md index c56be7cc12..af8c1bbcc4 100644 --- a/guides/source/routing.md +++ b/guides/source/routing.md @@ -645,7 +645,7 @@ match 'photos', to: 'photos#show', via: :all NOTE: Routing both `GET` and `POST` requests to a single action has security implications. In general, you should avoid routing all verbs to an action unless you have a good reason to. -NOTE: 'GET' in Rails doesn't check for CSRF token. You should never write to the database from 'GET' requests, for more information see the [security guide] (security.html#csrf-countermeasures) on CSRF countermeasures. +NOTE: 'GET' in Rails won't check for CSRF token. You should never write to the database from 'GET' requests, for more information see the [security guide](security.html#csrf-countermeasures) on CSRF countermeasures. ### Segment Constraints |