X-Git-Url: https://git.njae.me.uk/?a=blobdiff_plain;f=app%2Fcontrollers%2Fapplication_controller.rb;h=d83690e1b9a6bdd8a08754b38231799acefcb2ab;hb=0c831f9107670526c653c82f182b0b6983f49c31;hp=6635a3f487ad65fe47b2f25395016f2c8666819c;hpb=22d4a0d0027b52071d8c4242f4bd30eec2b036bf;p=feedcatcher.git

diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 6635a3f..d83690e 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -1,10 +1,5 @@
-# Filters added to this controller apply to all controllers in the application.
-# Likewise, all the methods added will be available for all controllers.
-
 class ApplicationController < ActionController::Base
-  helper :all # include all helpers, all the time
-  protect_from_forgery # See ActionController::RequestForgeryProtection for details
-
-  # Scrub sensitive parameters from your log
-  # filter_parameter_logging :password
+  # Prevent CSRF attacks by raising an exception.
+  # For APIs, you may want to use :null_session instead.
+  protect_from_forgery with: :exception
 end