diff options
author | Sergey Nartimov <just.lest@gmail.com> | 2012-09-14 18:48:05 +0400 |
---|---|---|
committer | Sergey Nartimov <just.lest@gmail.com> | 2012-09-14 18:48:30 +0400 |
commit | 23851290dc64b9e352618236e3504c76dad52b2c (patch) | |
tree | 779bbf5b952d99fc3b44b99d02debf0ae61fb263 /actionpack | |
parent | 84ba499b1645230dd90f46fa63e5d071ada49f37 (diff) | |
download | rails-23851290dc64b9e352618236e3504c76dad52b2c.tar.gz rails-23851290dc64b9e352618236e3504c76dad52b2c.tar.bz2 rails-23851290dc64b9e352618236e3504c76dad52b2c.zip |
update CHANGELOG
Add entry about 245941101b1ea00a9b1af613c20b0ee994a43946 and
95be790ece75710f2588558a6d5f40fd09543b97.
Diffstat (limited to 'actionpack')
-rw-r--r-- | actionpack/CHANGELOG.md | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/actionpack/CHANGELOG.md b/actionpack/CHANGELOG.md index 36e8479441..729a1e8198 100644 --- a/actionpack/CHANGELOG.md +++ b/actionpack/CHANGELOG.md @@ -1,5 +1,21 @@ ## Rails 4.0.0 (unreleased) ## +* Allow to configure how unverified request will be handled using `:with` + option in `protect_from_forgery` method. + + Valid unverified request handling methods are: + + - `:exception` - Raises ActionController::InvalidAuthenticityToken exception. + - `:reset_session` - Resets the session. + - `:null_session` - Provides an empty session during request but doesn't + reset it completely. Used as default if `:with` option is not specified. + + New applications are generated with: + + protect_from_forgery :with => :exception + + *Sergey Nartimov* + * Add .rb template handler, this handler simply allows arbitrary Ruby code as a template. *Guillermo Iguaran* * Add `separator` option for `ActionView::Helpers::TextHelper#excerpt`: |