Fix loading ActiveStorage::DiskController when CSRF protection is disabled by default

2017-11-21 14:59:30 -05:00 · 2017-11-21 14:59:30 -05:00 · 4d5f0bb30b
parent 3fa812615a
commit 4d5f0bb30b
1 changed files with 1 additions and 1 deletions
--- a/activestorage/app/controllers/active_storage/disk_controller.rb
+++ b/activestorage/app/controllers/active_storage/disk_controller.rb
@ -5,7 +5,7 @@
 # Always go through the BlobsController, or your own authenticated controller, rather than directly
 # to the service url.
 class ActiveStorage::DiskController < ActionController::Base
-  skip_forgery_protection
+  skip_forgery_protection if default_protect_from_forgery

  def show
    if key = decode_verified_key