aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_view
diff options
context:
space:
mode:
authorJeremy Kemper <jeremy@bitsweat.net>2010-02-04 15:26:24 -0800
committerJeremy Kemper <jeremy@bitsweat.net>2010-02-04 15:26:24 -0800
commit2191aa47acc0a560366c8c09fa9635602cff5f07 (patch)
tree45a7706719a896658fed6604b3026b8408b4825c /actionpack/lib/action_view
parent09a88a347d1f94869b945dfaa47ca54dd1940d46 (diff)
downloadrails-2191aa47acc0a560366c8c09fa9635602cff5f07.tar.gz
rails-2191aa47acc0a560366c8c09fa9635602cff5f07.tar.bz2
rails-2191aa47acc0a560366c8c09fa9635602cff5f07.zip
Expose CSRF param name also
Diffstat (limited to 'actionpack/lib/action_view')
-rw-r--r--actionpack/lib/action_view/helpers/csrf_helper.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/actionpack/lib/action_view/helpers/csrf_helper.rb b/actionpack/lib/action_view/helpers/csrf_helper.rb
index 2d6af52180..6f98bd4573 100644
--- a/actionpack/lib/action_view/helpers/csrf_helper.rb
+++ b/actionpack/lib/action_view/helpers/csrf_helper.rb
@@ -4,7 +4,7 @@ module ActionView
# Returns a meta tag with the request forgery protection token for forms to use. Put this in your head.
def csrf_meta_tag
if protect_against_forgery?
- %(<meta name="csrf-token" content="#{Rack::Utils.escape(form_authenticity_token)}"/>).html_safe
+ %(<meta name="csrf-param" content="#{Rack::Utils.escape(request_forgery_protection_token)}"/>\n<meta name="csrf-token" content="#{Rack::Utils.escape(form_authenticity_token)}"/>).html_safe
end
end
end