From 8780e5183b40bf7c5d74b0c362d836af955b376c Mon Sep 17 00:00:00 2001 From: Jure Grabnar Date: Thu, 19 Sep 2019 15:55:29 +0200 Subject: [PATCH] Remove CSRF check in WopiController --- app/controllers/wopi_controller.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/app/controllers/wopi_controller.rb b/app/controllers/wopi_controller.rb index e27520084..ffcdf03d3 100644 --- a/app/controllers/wopi_controller.rb +++ b/app/controllers/wopi_controller.rb @@ -1,6 +1,7 @@ class WopiController < ActionController::Base include WopiUtil + skip_before_action :verify_authenticity_token before_action :load_vars, :authenticate_user_from_token! before_action :verify_proof!