instance method unverified_request_warning_message

Ruby on Rails edge

Since v7.2.3.2 Private — implementation detail, not part of the public API

Available in: v7.2.3.2 v8.0.5.1 v8.1.3.1 edge

Signature

unverified_request_warning_message()

No documentation comment.

Source
# File actionpack/lib/action_controller/metal/request_forgery_protection.rb, line 544
      def unverified_request_warning_message
        if !valid_request_origin?
          "HTTP Origin header (#{request.origin}) didn't match request.base_url (#{request.base_url})"
        elsif sec_fetch_site_value == "cross-site"
          "Sec-Fetch-Site header (cross-site) indicates a cross-site request"
        elsif using_header_only_for_forgery_protection?
          "Sec-Fetch-Site header is missing or invalid (#{sec_fetch_site_value.inspect})"
        else
          "Can't verify CSRF token authenticity."
        end
      end

Defined in actionpack/lib/action_controller/metal/request_forgery_protection.rb line 544 · View on GitHub · Improve this page · Find usages on GitHub

Defined in ActionController::RequestForgeryProtection

Type at least 2 characters to search.

Use the arrow keys to navigate results, Enter to open one, Escape to close.

Keyboard shortcuts

/
Focus search
⌘K / Ctrl-K
Command palette
?
This help
Esc
Close