method

valid_request_origin?

v6.1.3.1 - Show latest stable - Class: ActionController::RequestForgeryProtection

valid_request_origin?()

private

Checks if the request originated from the same origin by looking at the Origin header.

# File actionpack/lib/action_controller/metal/request_forgery_protection.rb, line 455
      def valid_request_origin? # :doc:
        if forgery_protection_origin_check
          # We accept blank origin headers because some user agents don't send it.
          raise InvalidAuthenticityToken, NULL_ORIGIN_MESSAGE if request.origin == "null"
          request.origin.nil? || request.origin == request.base_url
        else
          true
        end
      end

valid_request_origin?

Related methods