Authorize admin after checking csrf (#523)

2018-06-29 13:59:03 -04:00 · 2018-06-29 13:59:03 -04:00 · 62352fe6d6
commit 62352fe6d6
parent 808550afb0
1 changed files with 1 additions and 0 deletions
--- a/app/controllers/admin/application_controller.rb
+++ b/app/controllers/admin/application_controller.rb
@ -7,6 +7,7 @@
 module Admin
  class ApplicationController < Administrate::ApplicationController
    include Pundit
+    protect_from_forgery with: :exception, prepend: true
    before_action :authorize_admin

    def order