Matt-Yorkley f1002b953d Disable Javascript CSRF protection on EnterprisesController#check_permalink route ...

This route checks if an enterprise permalink is taken or not. Allowing the route to be accessed via Javascript without strict CSRF protection is reasonable. Fixes the following errors:

ActionController::InvalidCrossOriginRequest: Security warning: an embedded <script> tag on another site requested protected JavaScript. If you know what you're doing, go ahead and disable forgery protection on this action to permit cross-origin JavaScript embedding.

2020-11-27 13:59:46 +00:00

2.2 KiB

Raw Blame History

View Raw