More work to fix CSRF issue on join (#2043)

2020-08-26 10:20:50 -04:00 · 2020-08-26 10:20:50 -04:00 · e2bfdef967
parent 503ca52806
commit e2bfdef967
1 changed files with 1 additions and 0 deletions
--- a/app/controllers/rooms_controller.rb
+++ b/app/controllers/rooms_controller.rb
@ -33,6 +33,7 @@ class RoomsController < ApplicationController
                unless: -> { !Rails.configuration.enable_email_verification }
  before_action :verify_room_owner_valid, only: [:show, :join]
  before_action :verify_user_not_admin, only: [:show]
+  skip_before_action :verify_authenticity_token, only: [:join]

  # POST /
  def create