Configure ActionController::RequestForgeryProtection for an ApplicationController that does not inherits from ActionController::Base (or any controller that does not include ActionController::RequestForgeryProtection).
This is required since the module is included after the application is loaded, so it does not get configured automatically by the configuration files config/environments/*.rb.
| # frozen_string_literal: true | |
| ActiveSupport::Reloader.to_prepare do | |
| # Configure `ActionController::RequestForgeryProtection` for `ApplicationController`. | |
| # This is required since the module is included *after the application is loaded*, so it | |
| # does not get configured automatically by the configuration files `config/environments/*.rb`. | |
| Rails.application.config.action_controller.each do |key, value| | |
| next unless ApplicationController.respond_to?("#{key}=") | |
| ApplicationController.send("#{key}=", value) | |
| end | |
| end |