Skip to content

Commit 0898fef

Browse files
committed
Fix issue flagged by brakeman
Confidence: High Category: Cross-Site Request Forgery Check: ForgerySetting Message: 'protect_from_forgery' should be called in Kracken::SessionsController File: app/controllers/kracken/sessions_controller.rb Line: 4 Per the suggestion we set it to raise an exception. If apps want to override this in the subclasses they can change it there.
1 parent c34f0d5 commit 0898fef

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

app/controllers/kracken/sessions_controller.rb

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,7 @@
22

33
module Kracken
44
class SessionsController < ActionController::Base
5+
protect_from_forgery with: :exception
56

67
def create
78
@user = user_class.find_or_create_from_auth_hash(auth_hash)

0 commit comments

Comments
 (0)