aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_controller/metal/request_forgery_protection.rb
diff options
context:
space:
mode:
authorVijay Dev <vijaydev.cse@gmail.com>2014-08-19 16:28:53 +0000
committerVijay Dev <vijaydev.cse@gmail.com>2014-08-19 16:28:53 +0000
commit41231ef6c6c6a6e546b69add28f04aafb9e0e952 (patch)
tree71ebb32624a29c5262ad076a5dd95ebe48844f88 /actionpack/lib/action_controller/metal/request_forgery_protection.rb
parent0cb3bdb66e87981c1094edecfce9182ae8aeb240 (diff)
parentbc70448f6d6b83c1cd0814c9e93f7ed8245637a7 (diff)
downloadrails-41231ef6c6c6a6e546b69add28f04aafb9e0e952.tar.gz
rails-41231ef6c6c6a6e546b69add28f04aafb9e0e952.tar.bz2
rails-41231ef6c6c6a6e546b69add28f04aafb9e0e952.zip
Merge branch 'master' of github.com:rails/docrails
Conflicts: actionpack/lib/action_controller/metal/mime_responds.rb actionview/lib/action_view/vendor/html-scanner/html/sanitizer.rb activerecord/lib/active_record/type/value.rb
Diffstat (limited to 'actionpack/lib/action_controller/metal/request_forgery_protection.rb')
-rw-r--r--actionpack/lib/action_controller/metal/request_forgery_protection.rb4
1 files changed, 2 insertions, 2 deletions
diff --git a/actionpack/lib/action_controller/metal/request_forgery_protection.rb b/actionpack/lib/action_controller/metal/request_forgery_protection.rb
index 0efa0fb259..7afbd767ce 100644
--- a/actionpack/lib/action_controller/metal/request_forgery_protection.rb
+++ b/actionpack/lib/action_controller/metal/request_forgery_protection.rb
@@ -9,7 +9,7 @@ module ActionController #:nodoc:
end
# Controller actions are protected from Cross-Site Request Forgery (CSRF) attacks
- # by including a token in the rendered html for your application. This token is
+ # by including a token in the rendered HTML for your application. This token is
# stored as a random string in the session, to which an attacker does not have
# access. When a request reaches your application, \Rails verifies the received
# token with the token in the session. Only HTML and JavaScript requests are checked,
@@ -44,7 +44,7 @@ module ActionController #:nodoc:
#
# The token parameter is named <tt>authenticity_token</tt> by default. The name and
# value of this token must be added to every layout that renders forms by including
- # <tt>csrf_meta_tags</tt> in the html +head+.
+ # <tt>csrf_meta_tags</tt> in the HTML +head+.
#
# Learn more about CSRF attacks and securing your application in the
# {Ruby on Rails Security Guide}[http://guides.rubyonrails.org/security.html].