提交 4df9680a 编写于 作者: L Luke Amdor

Removed reference in documentation of form_authenticity_token to deprecated...

Removed reference in documentation of form_authenticity_token to deprecated :secret option of protect_from_forgery
上级 ba84025e
......@@ -96,8 +96,7 @@ def verifiable_request_format?
!request.content_type.nil? && request.content_type.verify_request?
end
# Sets the token value for the current session. Pass a <tt>:secret</tt> option
# in +protect_from_forgery+ to add a custom salt to the hash.
# Sets the token value for the current session.
def form_authenticity_token
session[:_csrf_token] ||= ActiveSupport::SecureRandom.base64(32)
end
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册