APIdock / Ruby on Rails
/
Browse About
method

non_xhr_javascript_response?

rails latest stable - Class: ActionController::RequestForgeryProtection
non_xhr_javascript_response?()
private

Check for cross-origin JavaScript responses.

# File actionpack/lib/action_controller/metal/request_forgery_protection.rb, line 431
      def non_xhr_javascript_response? # :doc:
        %(\A(?:text|application)/javascript).match?(media_type) && !request.xhr?
      end

Related methods

  • Instance methods
  • commit_csrf_token
  • reset_csrf_token
  • Class methods
  • new
  • Private methods
  • privateany_authenticity_token_valid?
  • privatecompare_with_global_token
  • privatecompare_with_real_token
  • privatecsrf_token_hmac
  • privatedecode_csrf_token
  • privateencode_csrf_token
  • privateform_authenticity_param
  • privateform_authenticity_token
  • privategenerate_csrf_token
  • privateglobal_csrf_token
  • privatehandle_unverified_request
  • privatemark_for_same_origin_verification!
  • privatemarked_for_same_origin_verification?
  • privatemask_token
  • privatemasked_authenticity_token
  • privatenon_xhr_javascript_response?
  • privatenormalize_action_path
  • privateper_form_csrf_token
  • privateprotect_against_forgery?
  • privatereal_csrf_token
  • privaterequest_authenticity_tokens
  • privateunmask_token
  • privateunverified_request_warning_message
  • privatevalid_authenticity_token?
  • privatevalid_per_form_csrf_token?
  • privatevalid_request_origin?
  • privateverified_request?
  • privateverify_authenticity_token
  • privateverify_same_origin_request
  • privatexor_byte_strings
APIdock API Documentation Browser

© 2026 APIdock