method

valid_request_origin?

v5.0.0.1 - Show latest stable - Class: ActionController::RequestForgeryProtection

valid_request_origin?()

protected

Checks if the request originated from the same origin by looking at the Origin header.

# File actionpack/lib/action_controller/metal/request_forgery_protection.rb, line 398
      def valid_request_origin?
        if forgery_protection_origin_check
          # We accept blank origin headers because some user agents don't send it.
          request.origin.nil? || request.origin == request.base_url
        else
          true
        end
      end

valid_request_origin?

Related methods