mastodon/suppress_csrf_warnings.rb at 34209c0340ca6b7c61de964a17f5f3fe2e0f7c7b - mastodon - Git

mirrors/mastodon

mirror of https://github.com/mastodon/mastodon.git synced 2024-12-15 15:44:56 +01:00

Patrick Figel 537d2939b1 Suppress CSRF token warnings (#6240 )

CSRF token checking was enabled for API controllers in #6223,
producing "Can't verify CSRF token authenticity" log spam. This
disables logging of failed CSRF checks.

This also changes the protection strategy for
PushSubscriptionsController to use exceptions, making it consistent
with other controllers that use sessions.

2018-01-15 06:51:23 +01:00

4 lines

90 B

Ruby

Raw Blame History

	`# frozen_string_literal: true`

	`ActionController::Base.log_warning_on_csrf_failure = false`