Class: RuboCop::Cop::Paraxial::SkipAuthenticityToken

Inherits:
Base
  • Object
show all
Defined in:
lib/rubocop/cop/paraxial/csrf_skip.rb

Constant Summary collapse

MSG = 
"CSRF, skip_before_action :verify_authenticity_token in controller."

Instance Method Summary collapse

Instance Method Details

#on_send(node) ⇒ Object 



8
9
10
11
12
13
14
15
16
17
 
# File 'lib/rubocop/cop/paraxial/csrf_skip.rb', line 8

def on_send(node)
  # Ensure that the cop only applies to controller files
  return unless in_controller_file?

  # Check if the node is `skip_before_action :verify_authenticity_token`
  return unless node.method_name == :skip_before_action
  return unless node.arguments.any? { |arg| arg.respond_to?(:value) && arg.value == :verify_authenticity_token }

  add_offense(node)
end