Fix signed cookies by explicitly passing config to the cookie jar

1 files changed, 3 insertions, 2 deletions

diff --git a/actionpack/lib/action_controller/metal/cookies.rb b/actionpack/lib/action_controller/metal/cookies.rb
index 75e5d40a63..4aaa705203 100644
--- a/actionpack/lib/action_controller/metal/cookies.rb
+++ b/actionpack/lib/action_controller/metal/cookies.rb
@@ -7,10 +7,11 @@ module ActionController #:nodoc:
     included do
       helper_method :cookies
     end
-    
+
     private
       def cookies
-        request.cookie_jar
+        raise "You must set config.cookie_secret in your app's config" if config.secret.blank?
+        request.cookie_jar(:signing_secret => config.secret)
       end
   end
 end