Skip to content

False positive of protect_from_forgery #202

@riffraff

Description

@riffraff

this code

class ApplicationController < ActionController::Base
  protect_from_forgery with: :exception
end

results in a warning Owasp Ror CheatSheet: Cross Site Request Forgery check failed but unless I'm missing something, this is perfectly fine.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions