diff options
| author | Zachary Scott <e@zzak.io> | 2014-12-22 06:51:21 -0500 |
|---|---|---|
| committer | Zachary Scott <e@zzak.io> | 2014-12-22 06:51:21 -0500 |
| commit | 84af1e6d0788e7a9770cf25faaa7512f3bb1a03b (patch) | |
| tree | f27b95d0052f1591b16f57733129743e86c9846f /guides/source | |
| parent | bac74d66ecf2ed31e30aa9a5f8fbb87fc8cfcfee (diff) | |
| download | rails-84af1e6d0788e7a9770cf25faaa7512f3bb1a03b.tar.gz rails-84af1e6d0788e7a9770cf25faaa7512f3bb1a03b.tar.bz2 rails-84af1e6d0788e7a9770cf25faaa7512f3bb1a03b.zip | |
s/a unobtrusive/an unobtrusive [ci skip]
Diffstat (limited to 'guides/source')
| -rw-r--r-- | guides/source/security.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/guides/source/security.md b/guides/source/security.md index 32890e0606..66c740f1e3 100644 --- a/guides/source/security.md +++ b/guides/source/security.md @@ -247,7 +247,7 @@ protect_from_forgery with: :exception This will automatically include a security token in all forms and Ajax requests generated by Rails. If the security token doesn't match what was expected, an exception will be thrown. -NOTE: By default, Rails includes jQuery and a [unobtrusive scripting adapter for jQuery](https://github.com/rails/jquery-ujs), +NOTE: By default, Rails includes jQuery and an [unobtrusive scripting adapter for jQuery](https://github.com/rails/jquery-ujs), which adds a header called `X-CSRF-Token` on every non-GET Ajax call made by jQuery with the security token. Without this header, your non-GET requests won't be accepted by Rails. If you want to use another library to make Ajax calls, you will have to find how add the security token as a default header for Ajax calls in |