Pass CSRF token in asset upload request

pushtype / push_type

PushType is a modern, open source content management system for Ruby on Rails.

http://www.pushtype.org

Other

290 stars 32 forks source link

Pass CSRF token in asset upload request #53

Open prabhakar97 opened 6 years ago

prabhakar97 commented 6 years ago

This PR fixes #49. I faced the same issue with Rails 5.2 and push_type 0.12.1. Upon checking the parameters sent to PushType::Admin::AssetsController#upload I found that authenticity_token field was missing.

[https://discuss.pushtype.org/t/unprocessable-entity-upon-an-asset-upload/349](Forum thread)

epipheus commented 6 years ago

Can we get this merged into tagged version soon?

epipheus commented 6 years ago

Hmm. there is an issue with this though -- you need to also add the fix to the Media -> Update Media menu workflow. otherwise you end up with this when you update an asset:

epipheus commented 5 years ago

What release will this go in?