Is Rails 2.1 "protect_from_forgery" == csrf_killer plugin?

rubyonrails-talk
1

Just would like to verify:

Is protect_from_forgery (in Rails 2.1) == the csrf_killer plugin from Rick Olson?

Thanks, Wes

2

Just would like to verify:

Is protect_from_forgery (in Rails 2.1) == the csrf_killer plugin from Rick Olson?

Yup, it was merged in in rails 2.0

Fred

3

Thanks, Frederick.

Follow - up: Is there anything that precludes using protect_from_forgery with a DB session store?

Wes

4

Thanks, Frederick.

Follow - up: Is there anything that precludes using
protect_from_forgery with a DB session store?

nope (you do however need to pass a secret to protect_from_forgery)

Fred

5

Yeah, I just verified that.

Sorry, I should have tested it first.