Method: ActionController::RequestForgeryProtection::ProtectionMethods::NullSession#handle_unverified_request

Defined in:
actionpack/lib/action_controller/metal/request_forgery_protection.rb

#handle_unverified_request ⇒ Object

This is the method that defines the application behavior when a request is found to be unverified.



259
260
261
262
263
264
265
 
# File 'actionpack/lib/action_controller/metal/request_forgery_protection.rb', line 259

def handle_unverified_request
  request = @controller.request
  request.session = NullSessionHash.new(request)
  request.flash = nil
  request.session_options = { skip: true }
  request.cookie_jar = NullCookieJar.build(request, {})
end