method

masked_authenticity_token

v7.1.3.4 - Show latest stable - Class: ActionController::RequestForgeryProtection

masked_authenticity_token(form_options: {})

private

Creates a masked version of the authenticity token that varies on each request. The masking is used to mitigate SSL attacks like BREACH.

# File actionpack/lib/action_controller/metal/request_forgery_protection.rb, line 467
      def masked_authenticity_token(form_options: {})
        action, method = form_options.values_at(:action, :method)

        raw_token = if per_form_csrf_tokens && action && method
          action_path = normalize_action_path(action)
          per_form_csrf_token(nil, action_path, method)
        else
          global_csrf_token
        end

        mask_token(raw_token)
      end

masked_authenticity_token

Related methods