module Cuba::CSRF
Public Instance Methods
csrf_form_tag()
click to toggle source
# File lib/cuba/csrf.rb, line 15 def csrf_form_tag %Q(<input type="hidden" name="csrf_token" value="#{csrf_token}">) end
Also aliased as: csrf_tag
csrf_meta_tag()
click to toggle source
# File lib/cuba/csrf.rb, line 20 def csrf_meta_tag %Q(<meta name="csrf_token" content="#{csrf_token}">) end
csrf_safe?()
click to toggle source
# File lib/cuba/csrf.rb, line 5 def csrf_safe? req.get? || req.head? || req[:csrf_token] == csrf_token || env["HTTP_X_CSRF_TOKEN"] == csrf_token end
csrf_token()
click to toggle source
# File lib/cuba/csrf.rb, line 11 def csrf_token session[:csrf_token] ||= SecureRandom.base64(32) end