new(controller) Class Public methods

handle_unverified_request() Instance Public methods This is the method that defines the application behavior when a request is found to be unverified.

new(controller) Class Public methods

handle_unverified_request() Instance Public methods

new(controller) Class Public methods

protect_from_forgery(options = {}) Instance Public methods Turn on request forgery protection. Bear in mind that only non-GET, HTML/JavaScript requests are checked. class ApplicationController < ActionController::Base protect_from_forgery end class FooController < ApplicationController protect_from_forgery except: :index You can disable CSRF protection on controller by skipping the verification before_action: skip_before_action :verify_authenticity_token Valid Options:

render_to_string(*) Instance Public methods Overwrite #render_to_string because body can now be set to a rack body.

render_to_body(options = {}) Instance Public methods

render_to_body(options) Instance Public methods

_handle_render_options(options) Instance Public methods