Merge pull request #272 from aleksei-burlakov/protect_from_forgery

Enforse CSRF in errors_controller.rb
ClusterLabs · Nov 14, 2023 · b482c8c · b482c8c
2 parents 20ee324 + f9b76fe
commit b482c8c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/hawk/app/controllers/errors_controller.rb b/hawk/app/controllers/errors_controller.rb
@@ -2,7 +2,7 @@
 # See COPYING for license.
 
 class ErrorsController < ActionController::Base
-  protect_from_forgery with: :null_session
+  protect_from_forgery with: :exception
 
   def not_found
     respond_to do |format|