From 380ddd5310753fdf3082198e719642d44c68e69f Mon Sep 17 00:00:00 2001 From: Jeremy Kemper Date: Mon, 10 Dec 2007 01:15:30 +0000 Subject: Document how to disable forgery protection for tests. Useful note for those upgrading from 1.x. Closes #10440 [Trevor Turk] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@8350 5ecf4fe2-1ee6-0310-87b1-e25e094e27de --- actionpack/lib/action_controller/request_forgery_protection.rb | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'actionpack/lib/action_controller/request_forgery_protection.rb') diff --git a/actionpack/lib/action_controller/request_forgery_protection.rb b/actionpack/lib/action_controller/request_forgery_protection.rb index 035bad7498..75f9c0b284 100644 --- a/actionpack/lib/action_controller/request_forgery_protection.rb +++ b/actionpack/lib/action_controller/request_forgery_protection.rb @@ -54,6 +54,12 @@ module ActionController #:nodoc: # skip_before_filter :verify_authenticity_token # end # + # If you are upgrading from Rails 1.x, disable forgery protection to + # simplify your tests. Add this to config/environments/test.rb: + # + # # Disable request forgery protection in test environment + # config.action_controller.allow_forgery_protection = false + # # Valid Options: # # * :only/:except - passed to the before_filter call. Set which actions are verified. @@ -123,4 +129,4 @@ module ActionController #:nodoc: allow_forgery_protection && request_forgery_protection_token end end -end \ No newline at end of file +end -- cgit v1.2.3