Merge pull request #1334 from alphagov/update-csrf-protection

Update CSRF protection
alphagov · Apr 22, 2024 · 00e380a · 00e380a
2 parents 8aa3163 + cbdedac
commit 00e380a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
@@ -5,7 +5,7 @@ class ApplicationController < ActionController::Base
 
   before_action :authenticate_support_user!
 
-  protect_from_forgery
+  protect_from_forgery with: :exception
 
   rescue_from Timeout::Error, with: :service_unavailable