From 165fe71495ec51914b0e2043c4f653db6c9ad18e Mon Sep 17 00:00:00 2001 From: Boris Staal Date: Sat, 31 Aug 2013 20:27:39 +0700 Subject: [PATCH] Automatically disable CSRF protection for SOAP controllers (fixes #107) --- lib/wash_out/dispatcher.rb | 1 + lib/wash_out/version.rb | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/wash_out/dispatcher.rb b/lib/wash_out/dispatcher.rb index e1c49e8d..a60df46e 100644 --- a/lib/wash_out/dispatcher.rb +++ b/lib/wash_out/dispatcher.rb @@ -176,6 +176,7 @@ def self.included(controller) controller.send :before_filter, :_parse_soap_parameters, :except => [ :_generate_wsdl, :_invalid_action ] controller.send :before_filter, :_authenticate_wsse, :except => [ :_generate_wsdl, :_invalid_action ] controller.send :before_filter, :_map_soap_parameters, :except => [ :_generate_wsdl, :_invalid_action ] + controller.send :skip_before_filter, :verify_authenticity_token end def self.deep_select(hash, result=[], &blk) diff --git a/lib/wash_out/version.rb b/lib/wash_out/version.rb index f65c63ae..234dbaf4 100644 --- a/lib/wash_out/version.rb +++ b/lib/wash_out/version.rb @@ -1,3 +1,3 @@ module WashOut - VERSION = "0.8.2" + VERSION = "0.8.3" end