diff options
| author | Vijay Dev <vijaydev.cse@gmail.com> | 2014-08-19 16:28:53 +0000 | 
|---|---|---|
| committer | Vijay Dev <vijaydev.cse@gmail.com> | 2014-08-19 16:28:53 +0000 | 
| commit | 41231ef6c6c6a6e546b69add28f04aafb9e0e952 (patch) | |
| tree | 71ebb32624a29c5262ad076a5dd95ebe48844f88 /actionpack/lib/action_controller/metal | |
| parent | 0cb3bdb66e87981c1094edecfce9182ae8aeb240 (diff) | |
| parent | bc70448f6d6b83c1cd0814c9e93f7ed8245637a7 (diff) | |
| download | rails-41231ef6c6c6a6e546b69add28f04aafb9e0e952.tar.gz rails-41231ef6c6c6a6e546b69add28f04aafb9e0e952.tar.bz2 rails-41231ef6c6c6a6e546b69add28f04aafb9e0e952.zip  | |
Merge branch 'master' of github.com:rails/docrails
Conflicts:
	actionpack/lib/action_controller/metal/mime_responds.rb
	actionview/lib/action_view/vendor/html-scanner/html/sanitizer.rb
	activerecord/lib/active_record/type/value.rb
Diffstat (limited to 'actionpack/lib/action_controller/metal')
| -rw-r--r-- | actionpack/lib/action_controller/metal/request_forgery_protection.rb | 4 | 
1 files changed, 2 insertions, 2 deletions
diff --git a/actionpack/lib/action_controller/metal/request_forgery_protection.rb b/actionpack/lib/action_controller/metal/request_forgery_protection.rb index 0efa0fb259..7afbd767ce 100644 --- a/actionpack/lib/action_controller/metal/request_forgery_protection.rb +++ b/actionpack/lib/action_controller/metal/request_forgery_protection.rb @@ -9,7 +9,7 @@ module ActionController #:nodoc:    end    # Controller actions are protected from Cross-Site Request Forgery (CSRF) attacks -  # by including a token in the rendered html for your application. This token is +  # by including a token in the rendered HTML for your application. This token is    # stored as a random string in the session, to which an attacker does not have    # access. When a request reaches your application, \Rails verifies the received    # token with the token in the session. Only HTML and JavaScript requests are checked, @@ -44,7 +44,7 @@ module ActionController #:nodoc:    #    # The token parameter is named <tt>authenticity_token</tt> by default. The name and    # value of this token must be added to every layout that renders forms by including -  # <tt>csrf_meta_tags</tt> in the html +head+. +  # <tt>csrf_meta_tags</tt> in the HTML +head+.    #    # Learn more about CSRF attacks and securing your application in the    # {Ruby on Rails Security Guide}[http://guides.rubyonrails.org/security.html].  | 
