Rails, CSRF and Ajax requests
Rails protects controller actions from CSRF (Cross-Site Request Forgery) attacks with a token based on a random string stored in the session. The token parameter is named authenticity_token by default and will be embedded in all forms and Ajax requests generated by Rails. You should also add this token to all Ajax request that you [...]
Recent Comments