aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/CHANGELOG.md
diff options
context:
space:
mode:
authorSergey Nartimov <just.lest@gmail.com>2012-09-14 18:48:05 +0400
committerSergey Nartimov <just.lest@gmail.com>2012-09-14 18:48:30 +0400
commit23851290dc64b9e352618236e3504c76dad52b2c (patch)
tree779bbf5b952d99fc3b44b99d02debf0ae61fb263 /actionpack/CHANGELOG.md
parent84ba499b1645230dd90f46fa63e5d071ada49f37 (diff)
downloadrails-23851290dc64b9e352618236e3504c76dad52b2c.tar.gz
rails-23851290dc64b9e352618236e3504c76dad52b2c.tar.bz2
rails-23851290dc64b9e352618236e3504c76dad52b2c.zip
update CHANGELOG
Add entry about 245941101b1ea00a9b1af613c20b0ee994a43946 and 95be790ece75710f2588558a6d5f40fd09543b97.
Diffstat (limited to 'actionpack/CHANGELOG.md')
-rw-r--r--actionpack/CHANGELOG.md16
1 files changed, 16 insertions, 0 deletions
diff --git a/actionpack/CHANGELOG.md b/actionpack/CHANGELOG.md
index 36e8479441..729a1e8198 100644
--- a/actionpack/CHANGELOG.md
+++ b/actionpack/CHANGELOG.md
@@ -1,5 +1,21 @@
## Rails 4.0.0 (unreleased) ##
+* Allow to configure how unverified request will be handled using `:with`
+ option in `protect_from_forgery` method.
+
+ Valid unverified request handling methods are:
+
+ - `:exception` - Raises ActionController::InvalidAuthenticityToken exception.
+ - `:reset_session` - Resets the session.
+ - `:null_session` - Provides an empty session during request but doesn't
+ reset it completely. Used as default if `:with` option is not specified.
+
+ New applications are generated with:
+
+ protect_from_forgery :with => :exception
+
+ *Sergey Nartimov*
+
* Add .rb template handler, this handler simply allows arbitrary Ruby code as a template. *Guillermo Iguaran*
* Add `separator` option for `ActionView::Helpers::TextHelper#excerpt`: