search

shadowbq / cartoque

A simple and free CMDB app written in Ruby on Rails
http://cartoque.org/
MIT License
1 stars 0 forks source link

Rails4.x: Request Forgery (CORS) #7

Open shadowbq opened 8 years ago

shadowbq commented 8 years ago 
  42) SettingsController GET /settings/edit_visibility
      Failure/Error: yield

      ActionController::InvalidCrossOriginRequest:
        Security warning: an embedded <script> tag on another site requested protected JavaScript. If you know what you're doing, go ahead and disable forgery protection on this action to permit cross-origin JavaScript embedding.
      # /usr/local/rvm/gems/ruby-2.2.3/gems/actionpack-4.1.14/lib/action_controller/metal/request_forgery_protection.rb:217:in `verify_same_origin_request'