aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_view/helpers/form_tag_helper.rb
diff options
context:
space:
mode:
authorPiotr Sarnacki <drogus@gmail.com>2012-03-28 17:54:06 +0200
committerPiotr Sarnacki <drogus@gmail.com>2012-03-28 18:03:16 +0200
commit128cfbdf4d316a544a76e5c58dbeac153f3d4e36 (patch)
tree1393451fb453e5199d7839c2b008990fb29ab115 /actionpack/lib/action_view/helpers/form_tag_helper.rb
parent805b15ff35122f5fd0bb9c1742578b14eebfac32 (diff)
downloadrails-128cfbdf4d316a544a76e5c58dbeac153f3d4e36.tar.gz
rails-128cfbdf4d316a544a76e5c58dbeac153f3d4e36.tar.bz2
rails-128cfbdf4d316a544a76e5c58dbeac153f3d4e36.zip
config.action_view.embed_authenticity_token_in_remote_forms is true by default
Changed default value for `config.action_view.embed_authenticity_token_in_remote_forms` to `false`. This change breaks remote forms that need to work also without javascript, so if you need such behavior, you can either set it to `true` or explicitly pass `:authenticity_token => true` in form options
Diffstat (limited to 'actionpack/lib/action_view/helpers/form_tag_helper.rb')
-rw-r--r--actionpack/lib/action_view/helpers/form_tag_helper.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/actionpack/lib/action_view/helpers/form_tag_helper.rb b/actionpack/lib/action_view/helpers/form_tag_helper.rb
index be4e88c9b3..63451e2c36 100644
--- a/actionpack/lib/action_view/helpers/form_tag_helper.rb
+++ b/actionpack/lib/action_view/helpers/form_tag_helper.rb
@@ -19,7 +19,7 @@ module ActionView
include TextHelper
mattr_accessor :embed_authenticity_token_in_remote_forms
- self.embed_authenticity_token_in_remote_forms = true
+ self.embed_authenticity_token_in_remote_forms = false
# Starts a form tag that points the action to an url configured with <tt>url_for_options</tt> just like
# ActionController::Base#url_for. The method for the form defaults to POST.