public/once-campfire
1
0 Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-10-26 07:36:53 +09:00
Code Issues Packages Projects Releases Wiki Activity

Use header-only forgery protection and cache complete responses

Browse Source
This commit is contained in:
GPT on behalf of DHH committed 2026-10-08 09:05:10 +02:00
1 parent 008ea1ab2a
commit 0f5d0b2b6e
12 files changed
+169 -54
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

config/initializers/active_storage_authentication.rb
+1
View File
@@ -7,6 +7,7 @@
# can read the public login page. Require a valid Campfire session before an
# anonymous caller can allocate a Blob or persist bytes to disk.
Rails.application.config.to_prepare do
ActiveStorage::BaseController.forgery_protection_verification_strategy = :header_only
ActiveStorage::DirectUploadsController.include ActiveStorageAuthentication
ActiveStorage::DirectUploadsController.before_action :require_active_storage_authentication