Improve web api protect (#6343)

2018-04-17 22:23:46 +09:00
parent 204d72fbe4
commit 897199910f
6 changed files with 18 additions and 10 deletions
--- a/app/controllers/api/web/push_subscriptions_controller.rb
+++ b/app/controllers/api/web/push_subscriptions_controller.rb
@ -1,10 +1,9 @@
 # frozen_string_literal: true

-class Api::Web::PushSubscriptionsController < Api::BaseController
+class Api::Web::PushSubscriptionsController < Api::Web::BaseController
  respond_to :json

  before_action :require_user!
-  protect_from_forgery with: :exception

  def create
    active_session = current_session