please help a newbie in Rails :) I have protect_from_forgery call (which is given by default) with no attributes in my ApplicationController class.
开发者_JS百科I have a simple Ruby on Rails form which includes an authenticity_token. Unfortunatly, I missed that when you page cache this page then the Authenticity Token becomes invalid. I\'m glad I
Rails AuthenticityToken automatically protects POST/PUT/DELETE requests from CSRF attacks.But I have another use case in mind.