Displaying 3 results from an estimated 3 matches for "viget".
Did you mean:
viet
2010 Sep 21
7
Ajax CSRF in Rails3
I''m using rails3. It does not seem to check the authenticity_token
when doing a POST using Ajax. I traced this to:
module ActionDispatch
class Request < Rack::Request
.....
def forgery_whitelisted?
get? || xhr? || content_mime_type.nil? || !
content_mime_type.verify_request?
end
end
so you don''t check if its a get? or a xhr? (ie ajax request). Is this
correct?
--
2009 Aug 11
10
Git, Capistrano, Passenger, and Apache Questions
First, I''m trying to do the legwork with utilizing all 4 together
because many people say it''s a good combination to use. I already have
apache setup (was using it with the PHP version of my site formerly).
I''ve installed all gems and dependencies that I need on my slice (using
slicehost).
I have a fully pushed git repository (master) on github (private git)
with one
2007 Aug 31
48
Deprecating the mocking framework?
I saw in one of Dave C.''s comments to a ticket that "our current plan
is to deprecate the mocking framework." I hadn''t heard anything about
that, but then again I haven''t paid super close attention to the list.
Are we planning on dumping the mock framework in favor of using Mocha
(or any other framework one might want to plug in?).
Pat