instance method
unverified_request_warning_message
Ruby on Rails edge
Since v7.2.3.2 Private — implementation detail, not part of the public APISignature
unverified_request_warning_message()
No documentation comment.
Source
# File actionpack/lib/action_controller/metal/request_forgery_protection.rb, line 544
def unverified_request_warning_message
if !valid_request_origin?
"HTTP Origin header (#{request.origin}) didn't match request.base_url (#{request.base_url})"
elsif sec_fetch_site_value == "cross-site"
"Sec-Fetch-Site header (cross-site) indicates a cross-site request"
elsif using_header_only_for_forgery_protection?
"Sec-Fetch-Site header is missing or invalid (#{sec_fetch_site_value.inspect})"
else
"Can't verify CSRF token authenticity."
end
end
Defined in actionpack/lib/action_controller/metal/request_forgery_protection.rb line 544
· View on GitHub
· Improve this page
· Find usages on GitHub
Defined in ActionController::RequestForgeryProtection