about summary refs log tree commit diff
path: root/app/controllers/api/web
diff options
context:
space:
mode:
authorJenkins <jenkins@jenkins.ninjawedding.org>2018-01-15 06:17:15 +0000
committerJenkins <jenkins@jenkins.ninjawedding.org>2018-01-15 06:17:15 +0000
commit0c7dc6c78123728a9a0a32e16c2ad524e76926c8 (patch)
treed599071d84f545e16a8ebaddf6e215cadc89247d /app/controllers/api/web
parent8ee6ed358ff5706e3d0c402a9b23846b51f6d451 (diff)
parent74c1c9ec01addc7474d74712f76fb6d6d5eecdf7 (diff)
Merge remote-tracking branch 'tootsuite/master' into glitchsoc/master
Diffstat (limited to 'app/controllers/api/web')
-rw-r--r--app/controllers/api/web/push_subscriptions_controller.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/app/controllers/api/web/push_subscriptions_controller.rb b/app/controllers/api/web/push_subscriptions_controller.rb
index 52e250d02..68ccbd5e2 100644
--- a/app/controllers/api/web/push_subscriptions_controller.rb
+++ b/app/controllers/api/web/push_subscriptions_controller.rb
@@ -4,6 +4,7 @@ class Api::Web::PushSubscriptionsController < Api::BaseController
   respond_to :json
 
   before_action :require_user!
+  protect_from_forgery with: :exception
 
   def create
     params.require(:subscription).require(:endpoint)