evazion 2d34e69737 api: disable csrf protection for api requests. ...

Fixes POST/PUT API requests failing with InvalidAuthenticityToken errors
due to missing CSRF tokens.

CSRF protection is only necessary for cookie-based authentication. For
non-cookie-based authentication we can safely disable it. That is, if
the user is already passing their login + api_key, then we don't need
to additionally verify the request with a CSRF token.

ref: 2e407fa476 (comments)

2019-08-24 22:55:35 -05:00

..

controllers

api: disable csrf protection for api requests.

2019-08-24 22:55:35 -05:00

helpers

helpers: drop fast_link_to.

2019-08-22 23:33:58 -05:00

javascript

comments: show "undo vote" link by default on voted comments (fix #4143).

2019-08-20 21:17:02 -05:00

jobs

jobs: migrate mass updates to ActiveJob.

2019-08-19 00:46:31 -05:00

logical

api: disable csrf protection for api requests.

2019-08-24 22:55:35 -05:00

mailers

Remove unused mailers.

2019-08-06 10:42:45 -05:00

models

Fix #4125: Detect forum and comment spam.

2019-08-23 22:41:47 -05:00

presenters

users: drop id_to_name, name_to_id caching.

2019-08-18 11:24:42 -05:00

views

helpers: drop fast_link_to.

2019-08-22 23:33:58 -05:00