diff options
author | Vijay Dev <vijaydev.cse@gmail.com> | 2014-08-19 16:28:53 +0000 |
---|---|---|
committer | Vijay Dev <vijaydev.cse@gmail.com> | 2014-08-19 16:28:53 +0000 |
commit | 41231ef6c6c6a6e546b69add28f04aafb9e0e952 (patch) | |
tree | 71ebb32624a29c5262ad076a5dd95ebe48844f88 /actionpack/lib/action_controller/metal | |
parent | 0cb3bdb66e87981c1094edecfce9182ae8aeb240 (diff) | |
parent | bc70448f6d6b83c1cd0814c9e93f7ed8245637a7 (diff) | |
download | rails-41231ef6c6c6a6e546b69add28f04aafb9e0e952.tar.gz rails-41231ef6c6c6a6e546b69add28f04aafb9e0e952.tar.bz2 rails-41231ef6c6c6a6e546b69add28f04aafb9e0e952.zip |
Merge branch 'master' of github.com:rails/docrails
Conflicts:
actionpack/lib/action_controller/metal/mime_responds.rb
actionview/lib/action_view/vendor/html-scanner/html/sanitizer.rb
activerecord/lib/active_record/type/value.rb
Diffstat (limited to 'actionpack/lib/action_controller/metal')
-rw-r--r-- | actionpack/lib/action_controller/metal/request_forgery_protection.rb | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/actionpack/lib/action_controller/metal/request_forgery_protection.rb b/actionpack/lib/action_controller/metal/request_forgery_protection.rb index 0efa0fb259..7afbd767ce 100644 --- a/actionpack/lib/action_controller/metal/request_forgery_protection.rb +++ b/actionpack/lib/action_controller/metal/request_forgery_protection.rb @@ -9,7 +9,7 @@ module ActionController #:nodoc: end # Controller actions are protected from Cross-Site Request Forgery (CSRF) attacks - # by including a token in the rendered html for your application. This token is + # by including a token in the rendered HTML for your application. This token is # stored as a random string in the session, to which an attacker does not have # access. When a request reaches your application, \Rails verifies the received # token with the token in the session. Only HTML and JavaScript requests are checked, @@ -44,7 +44,7 @@ module ActionController #:nodoc: # # The token parameter is named <tt>authenticity_token</tt> by default. The name and # value of this token must be added to every layout that renders forms by including - # <tt>csrf_meta_tags</tt> in the html +head+. + # <tt>csrf_meta_tags</tt> in the HTML +head+. # # Learn more about CSRF attacks and securing your application in the # {Ruby on Rails Security Guide}[http://guides.rubyonrails.org/security.html]. |