diff options
| author | Piotr Sarnacki <drogus@gmail.com> | 2012-03-28 17:54:06 +0200 |
|---|---|---|
| committer | Piotr Sarnacki <drogus@gmail.com> | 2012-03-28 18:03:16 +0200 |
| commit | 128cfbdf4d316a544a76e5c58dbeac153f3d4e36 (patch) | |
| tree | 1393451fb453e5199d7839c2b008990fb29ab115 /guides/source | |
| parent | 805b15ff35122f5fd0bb9c1742578b14eebfac32 (diff) | |
| download | rails-128cfbdf4d316a544a76e5c58dbeac153f3d4e36.tar.gz rails-128cfbdf4d316a544a76e5c58dbeac153f3d4e36.tar.bz2 rails-128cfbdf4d316a544a76e5c58dbeac153f3d4e36.zip | |
config.action_view.embed_authenticity_token_in_remote_forms is true by default
Changed default value for `config.action_view.embed_authenticity_token_in_remote_forms`
to `false`. This change breaks remote forms that need to work also without javascript,
so if you need such behavior, you can either set it to `true` or explicitly pass
`:authenticity_token => true` in form options
Diffstat (limited to 'guides/source')
| -rw-r--r-- | guides/source/configuring.textile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/guides/source/configuring.textile b/guides/source/configuring.textile index 46e02c904f..246af587bc 100644 --- a/guides/source/configuring.textile +++ b/guides/source/configuring.textile @@ -395,7 +395,7 @@ And can reference in the view with the following code: * +config.action_view.cache_asset_ids+ With the cache enabled, the asset tag helper methods will make fewer expensive file system calls (the default implementation checks the file system timestamp). However this prevents you from modifying any asset files while the server is running. -* +config.action_view.embed_authenticity_token_in_remote_forms+ This is by default set to true. If you set it to false, authenticity_token will not be added to forms with +:remote => true+ by default. You can force +authenticity_token+ to be added to such remote form by passing +:authenticity_token => true+ option. +* +config.action_view.embed_authenticity_token_in_remote_forms+ allows you to set the default behavior for +authenticity_token+ in forms with +:remote => true+. By default it's set to false, which means that remote forms will not include +authenticity_token+, which is helpful when you're fragment-caching the form. Remote forms get the authenticity from the +meta+ tag, so embedding is unnecessary unless you support browsers without JavaScript. In such case you can either pass +:authenticity_token => true+ as a form option or set this config setting to +true+ h4. Configuring Action Mailer |