instance method
verified_query_request?
Ruby on Rails edge
Since edge Private — implementation detail, not part of the public APISignature
verified_query_request?()QUERY requests are exempt from forgery protection like GET and HEAD, but only when the request actually arrived with the QUERY method. A request tunneled through POST with a _method=query override (as newer Rack::MethodOverride versions support) was submitted as an ordinary form POST, which the exemption’s rationale — HTML forms cannot emit QUERY, and cross-origin QUERY is always preflighted — does not cover.
Source
# File actionpack/lib/action_controller/metal/request_forgery_protection.rb, line 626
def verified_query_request? # :doc:
request.query? && request.method == "QUERY"
end
Defined in actionpack/lib/action_controller/metal/request_forgery_protection.rb line 626
· View on GitHub
· Improve this page
· Find usages on GitHub
Defined in ActionController::RequestForgeryProtection