Enable open redirect protection

This commit is contained in:
Tom Hughes 2022-03-01 18:39:08 +00:00
parent 73426ea383
commit 304eb3b75c

View file

@ -73,7 +73,7 @@ Rails.application.config.active_record.verify_foreign_keys_for_fixtures = true
Rails.application.config.active_record.partial_inserts = false Rails.application.config.active_record.partial_inserts = false
# Protect from open redirect attacks in `redirect_back_or_to` and `redirect_to`. # Protect from open redirect attacks in `redirect_back_or_to` and `redirect_to`.
# Rails.application.config.action_controller.raise_on_open_redirects = true Rails.application.config.action_controller.raise_on_open_redirects = true
# Change the variant processor for Active Storage. # Change the variant processor for Active Storage.
# Changing this default means updating all places in your code that # Changing this default means updating all places in your code that