Display an error when authenticity token is invalid.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3094 e93f8b46-1217-0410-a6f0-8f06a7374b81

Display an error when authenticity token is invalid.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3094 e93f8b46-1217-0410-a6f0-8f06a7374b81
f3bcb705 · Jean-Philippe Lang · ebab5a00 · f3bcb705
Commit f3bcb705 authored Nov 25, 2009 by Jean-Philippe Lang
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 0 deletions

application_controller.rb app/controllers/application_controller.rb +6 -0

No files found.
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -38,6 +38,8 @@ class ApplicationController < ActionController::Base
  filter_parameter_logging :password
  protect_from_forgery
  
+  rescue_from ActionController::InvalidAuthenticityToken, :with => :invalid_authenticity_token
+  
  include Redmine::Search::Controller
  include Redmine::MenuManager::MenuController
  helper Redmine::MenuManager::MenuHelper
@@ -189,6 +191,10 @@ class ApplicationController < ActionController::Base
    render :text => '', :layout => !request.xhr?, :status => 500
  end
  
+  def invalid_authenticity_token
+    render_error "Invalid form authenticity token."
+  end
+  
  def render_feed(items, options={})    
    @items = items || []
    @items.sort! {|x,y| y.event_datetime <=> x.event_datetime }