Protect controllers from potential CSRF attacks. #4216

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3051 e93f8b46-1217-0410-a6f0-8f06a7374b81
2009-11-14 19:41:07 +00:00
parent 93bf1df5d4
commit ea0bc56a65
4 changed files with 10 additions and 0 deletions
@@ -25,6 +25,7 @@ class ApplicationController < ActionController::Base
  
  before_filter :user_setup, :check_if_login_required, :set_localization
  filter_parameter_logging :password
+  protect_from_forgery
  
  include Redmine::Search::Controller
  include Redmine::MenuManager::MenuController