From 9fe65c6214d0c75b64de8e33eb86311b5b7ebd28 Mon Sep 17 00:00:00 2001 From: David Heinemeier Hansson Date: Sat, 28 May 2016 16:18:38 +0200 Subject: The first comment does not explain anything that the code doesnt and the second is now irrelevant with the dedicated API mode --- .../rails/app/templates/app/controllers/application_controller.rb.tt | 2 -- 1 file changed, 2 deletions(-) (limited to 'railties') diff --git a/railties/lib/rails/generators/rails/app/templates/app/controllers/application_controller.rb.tt b/railties/lib/rails/generators/rails/app/templates/app/controllers/application_controller.rb.tt index f726fd6305..413354186d 100644 --- a/railties/lib/rails/generators/rails/app/templates/app/controllers/application_controller.rb.tt +++ b/railties/lib/rails/generators/rails/app/templates/app/controllers/application_controller.rb.tt @@ -1,7 +1,5 @@ class ApplicationController < ActionController::<%= options[:api] ? "API" : "Base" %> <%- unless options[:api] -%> - # Prevent CSRF attacks by raising an exception. - # For APIs, you may want to use :null_session instead. protect_from_forgery with: :exception <%- end -%> end -- cgit v1.2.3