SECURITY WARNING: No secret option provided to Rack::Session::Cookie.

rubyonrails-talk
1

I am getting following warning while generating model, how to get rid of this warning and what is cause for this warning. I am using rails 3.2.8

   SECURITY WARNING: No secret option provided to Rack::Session::Cookie.    This poses a security threat. It is strongly recommended that you    provide a secret to prevent exploits that may be possible from crafted    cookies. This will not be supported in future versions of Rack, and    future versions will even invalidate your existing user cookies.

Thank you.

2

Normally you’d have

YourApplication::Application.config.secret_token = ‘long random string’

in an initializer, which rails should then pass through to rack. You can use rake secret to generate such a token.

Fred

3

Frederick Cheung wrote in post #1095286:

4

I got the same Problem. My Rake Version 10.0.3. Thank you Mr.Robert Walker

5

Rake is not Rack.

6

Thank you Jordon