SECURITY: correct our CSRF implementation to be much more aggressive

This commit is contained in:
Sam
2013-07-29 15:13:13 +10:00
parent 4a20d09523
commit aa6c92922d
8 changed files with 58 additions and 7 deletions

View File

@ -20,6 +20,9 @@ module Discourse
# When a setting is missing
class SiteSettingMissing < Exception; end
# Cross site request forgery
class CSRF < Exception; end
def self.cache
@cache ||= Cache.new
end