-
由 Sergey Nartimov 提交于
It's further work on CSRF after 24594110. The :null_session CSRF protection method provide an empty session during request processing but doesn't reset it completely (as :reset_session does).
95be790e
It's further work on CSRF after 24594110. The :null_session CSRF protection method provide an empty session during request processing but doesn't reset it completely (as :reset_session does).