aboutsummaryrefslogtreecommitdiffstats
path: root/guides/source/security.md
diff options
context:
space:
mode:
authorAkira Matsuda <ronnie@dio.jp>2013-01-02 06:41:51 +0900
committerAkira Matsuda <ronnie@dio.jp>2013-01-02 06:41:51 +0900
commit6c7699f60122396c40087363a9680778e87bcc37 (patch)
treeec730bad8d465d48aad9a2234ba6e97ac47aecae /guides/source/security.md
parent7496c8c1f848dbc12b869337b389479b0c1ed45f (diff)
downloadrails-6c7699f60122396c40087363a9680778e87bcc37.tar.gz
rails-6c7699f60122396c40087363a9680778e87bcc37.tar.bz2
rails-6c7699f60122396c40087363a9680778e87bcc37.zip
PUT => PATCH or PUT
Diffstat (limited to 'guides/source/security.md')
-rw-r--r--guides/source/security.md2
1 files changed, 1 insertions, 1 deletions
diff --git a/guides/source/security.md b/guides/source/security.md
index 0b0cfe69c4..3706a61431 100644
--- a/guides/source/security.md
+++ b/guides/source/security.md
@@ -210,7 +210,7 @@ The HTTP protocol basically provides two main types of requests - GET and POST (
* The interaction _changes the state_ of the resource in a way that the user would perceive (e.g., a subscription to a service), or
* The user is _held accountable for the results_ of the interaction.
-If your web application is RESTful, you might be used to additional HTTP verbs, such as PUT or DELETE. Most of today's web browsers, however do not support them - only GET and POST. Rails uses a hidden `_method` field to handle this barrier.
+If your web application is RESTful, you might be used to additional HTTP verbs, such as PATCH, PUT or DELETE. Most of today's web browsers, however do not support them - only GET and POST. Rails uses a hidden `_method` field to handle this barrier.
_POST requests can be sent automatically, too_. Here is an example for a link which displays www.harmless.com as destination in the browser's status bar. In fact it dynamically creates a new form that sends a POST request.