isaacsanders / omniauth-stripe-connect

Stripe Connect OAuth2 Strategy for OmniAuth 1.0
MIT License
130 stars 74 forks source link

Update stripe_connect.rb #33

Closed homakov closed 9 years ago

homakov commented 9 years ago

Fixing csrf vulnerability.

bhaity commented 9 years ago

@isaacsanders @homakov what's the status on merging this ?

isaacsanders commented 9 years ago

I feel like this was released in v2.7.0...

isaacsanders commented 9 years ago

I received an email from Stripe's Security team to fix this, and it was all said and done before I saw @homakov's PR. Thanks for your contribution, @homakov.

isaacsanders commented 9 years ago

I am kind of geeking out that you even put a PR in on one of my projects.