From 682f6648193a7d166d8f54be98af19c62b4e938f Mon Sep 17 00:00:00 2001 From: Robin Dupret Date: Mon, 29 Jul 2019 12:41:35 +0200 Subject: Tiny documentation fix [ci skip] --- guides/source/working_with_javascript_in_rails.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'guides/source') diff --git a/guides/source/working_with_javascript_in_rails.md b/guides/source/working_with_javascript_in_rails.md index b740e933ba..28af1cd88d 100644 --- a/guides/source/working_with_javascript_in_rails.md +++ b/guides/source/working_with_javascript_in_rails.md @@ -536,9 +536,9 @@ the token: var token = document.getElementsByName('csrf-token')[0].content ``` -You can then submit this token as a X-CSRF-Token in your header for your -Ajax requst. You do not need to add a CSRF for GET requests, only non-GET -requests. +You can then submit this token as a `X-CSRF-Token` header for your +Ajax request. You do not need to add a CSRF token for GET requests, +only non-GET ones. You can read more about about Cross-Site Request Forgery in [Security](https://guides.rubyonrails.org/security.html#cross-site-request-forgery-csrf) -- cgit v1.2.3