RubyFlow The Ruby and Rails community linklog

×

The Ruby and Rails community linklog

Made a library? Written a blog post? Found a useful tutorial? Share it with the Ruby community here or just enjoy what everyone else has found!

Rails 3: forgery (csrf) protection for AJAX requests

by Zaid —

I noticed the other day that rails seems to be ignoring authenticity tokens for AJAX requests. For instance, I purposely changed my AJAX call to pass an invalid token but did not manage to get Rails to complain..

I investigate this and provide the answer in this post

Post a comment

You can use basic HTML markup (e.g. <a>) or Markdown.

As you are not logged in, you will be
directed via GitHub to signup or sign in