method

handle_unverified_request

v4.2.9 - Show latest stable - Class: ActionController::RequestForgeryProtection::ProtectionMethods::NullSession

handle_unverified_request()

public

This is the method that defines the application behavior when a request is found to be unverified.

# File actionpack/lib/action_controller/metal/request_forgery_protection.rb, line 125
        def handle_unverified_request
          request = @controller.request
          request.session = NullSessionHash.new(request.env)
          request.env['action_dispatch.request.flash_hash'] = nil
          request.env['rack.session.options'] = { skip: true }
          request.env['action_dispatch.cookies'] = NullCookieJar.build(request)
        end

handle_unverified_request

Related methods