module Cuba::CSRF

Public Instance Methods

csrf_form_tag() click to toggle source
# File lib/cuba/csrf.rb, line 15
def csrf_form_tag
  %Q(<input type="hidden" name="csrf_token" value="#{csrf_token}">)
end
Also aliased as: csrf_tag
csrf_meta_tag() click to toggle source
# File lib/cuba/csrf.rb, line 20
def csrf_meta_tag
  %Q(<meta name="csrf_token" content="#{csrf_token}">)
end
csrf_safe?() click to toggle source
# File lib/cuba/csrf.rb, line 5
def csrf_safe?
  req.get? || req.head? ||
    req[:csrf_token] == csrf_token ||
    env["HTTP_X_CSRF_TOKEN"] == csrf_token
end
csrf_tag()
Alias for: csrf_form_tag
csrf_token() click to toggle source
# File lib/cuba/csrf.rb, line 11
def csrf_token
  session[:csrf_token] ||= SecureRandom.base64(32)
end